| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-4610 | 6.8 |
Unrestricted file upload vulnerability in config/upload.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to upload and execute arbitrary PHP files in images/, possibly related to config/admin.php.
|
15-10-2018 - 21:36 | 31-08-2007 - 00:17 | |
| CVE-2007-4611 | 7.5 |
SQL injection vulnerability in viewevent.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
15-10-2018 - 21:36 | 31-08-2007 - 00:17 | |
| CVE-2007-4612 | 4.3 |
CRLF injection vulnerability in contact.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to add arbitrary mail headers via CRLF sequences in the subject parameter. NOTE: this can be leveraged for spam by adding To or Cc headers.
|
15-10-2018 - 21:36 | 31-08-2007 - 00:17 |