EUVD-2007-4593

Malware in sbrugna...

EUVD-2007-4592

Malware in sbrugna...

Unrestricted file upload

Unrestricted file upload vulnerability in config/upload.php in Moonware aka Dale Mooney Gallery allows remote attackers to upload and execute arbitrary PHP files in images/, possibly related to config/admin.php...

CVE-2007-4611

SQL injection vulnerability in viewevent.php in Moonware aka Dale Mooney Gallery allows remote attackers to execute arbitrary SQL commands via the id parameter...

Crlf injection

CRLF injection vulnerability in contact.php in Moonware aka Dale Mooney Gallery allows remote attackers to add arbitrary mail headers via CRLF sequences in the subject parameter. NOTE: this can be leveraged for spam by adding To or Cc headers...

CVE-2007-4610

Unrestricted file upload vulnerability in config/upload.php in Moonware aka Dale Mooney Gallery allows remote attackers to upload and execute arbitrary PHP files in images/, possibly related to config/admin.php...

CVE-2007-4612

CRLF injection vulnerability in contact.php in Moonware aka Dale Mooney Gallery allows remote attackers to add arbitrary mail headers via CRLF sequences in the subject parameter. NOTE: this can be leveraged for spam by adding To or Cc headers...

CVE-2007-4611

SQL injection vulnerability in viewevent.php in Moonware aka Dale Mooney Gallery allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-4610

Unrestricted file upload vulnerability in config/upload.php in Moonware aka Dale Mooney Gallery allows remote attackers to upload and execute arbitrary PHP files in images/, possibly related to config/admin.php...

CVE-2007-4611

CVE-2007-4611 describes an SQL injection in Moonware (Dale Mooney Gallery) via the id parameter in viewevent.php, allowing remote attackers to submit arbitrary SQL commands. The issue is caused by unsafe handling of the id input leading to a compromised database query. Multiple connected sources ...

CVE-2007-4612

The CVE-2007-4612 entry concerns Moonware (Dale Mooney Gallery) software, specifically the contact.php script. The vulnerability is a CRLF injection that lets remote attackers inject arbitrary mail headers via CRLF sequences in the subject parameter. This header injection could be leveraged to ad...

CVE-2007-4610

The CVE-2007-4610 issue affects Moonware (aka Dale Mooney Gallery). It is an unrestricted file upload vulnerability in config/upload.php that lets remote attackers upload and execute arbitrary PHP files in the images/ directory, with potential relation to config/admin.php. The entry states this a...

moonware-multi.txt

Moonware Software Multiple Vulnerabilities by s0cratex -------- MSN: s0cratexatnasadotgov Moonware Homepage: http://dalemooney.lost-soldiers.com I. Moon Gallery ---- ------- Bug: Arbitrary file upload Dork: "Powered by: Dale Mooney Gallery" Details: The file /config/upload.php don't have any...

Moonware Software Multiple Vulnerabilities

Moonware Software Multiple Vulnerabilities by s0cratex -------- MSN: s0cratexatnasadotgov Moonware Homepage: http://dalemooney.lost-soldiers.com I. Moon Gallery ---- ------- Bug: Arbitrary file upload Dork: "Powered by: Dale Mooney Gallery" Details: The file /config/upload.php don't have any...