Cafeengine - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2009-02-13.

Products

• Easycafeengine - 3 CVEs

Newest CVEs of Cafeengine

• CVE-2009-0574 - CVSS 7.5 (high), 2009-02-13: SQL injection vulnerability in index.php in Easy CafeEngine allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different…
• CVE-2008-4605 - CVSS 7.5 (high), 2008-10-18: SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) dish.php and (2) menu.php.
• CVE-2008-4604 - CVSS 7.5 (high), 2008-10-18: SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter.