Cafeengine: Security Vulnerabilities
SQL injection vulnerability in index.php in Easy CafeEngine allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-4604.
CVSS Score
7.5
EPSS Score
0.001
Published
2009-02-13
SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter.
CVSS Score
7.5
EPSS Score
0.002
Published
2008-10-18
SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) dish.php and (2) menu.php.
CVSS Score
7.5
EPSS Score
0.002
Published
2008-10-18