CVE-2007-4612: Dale Mooney Contact Form

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

CRLF injection vulnerability in contact.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to add arbitrary mail headers via CRLF sequences in the subject parameter. NOTE: this can be leveraged for spam by adding To or Cc headers.

Affected products

• Dale Mooney Contact Form: any version

Published 2007-08-31. Last modified 2026-06-16.