Easycafeengine (Cafeengine) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2009-02-13. Vendor: Cafeengine.

CVEs of Easycafeengine

• CVE-2009-0574 - CVSS 7.5 (high), 2009-02-13: SQL injection vulnerability in index.php in Easy CafeEngine allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different…
• CVE-2008-4605 - CVSS 7.5 (high), 2008-10-18: SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) dish.php and (2) menu.php.
• CVE-2008-4604 - CVSS 7.5 (high), 2008-10-18: SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter.