CVE-2008-4604

CVE-2008-4604 affects Easy CafeEngine 1.1. Affected component: index.php. Vulnerability: SQL injection in the itemid parameter in index.php, enabling remote execution of arbitrary SQL commands. Root cause: improper sanitization of input leading to SQL injection. Impact as stated by sources: parti...

CVE-2008-4605

CVE-2008-4605 describes an SQL injection vulnerability in CafeEngine. The vulnerability affects the id parameter in two scripts, dish.php and menu.php, allowing remote attackers to execute arbitrary SQL commands. This is the explicit compromise path described in the connected documents. The avail...

CVE-2009-0574

CVE-2009-0574 describes a SQL injection in Easy CafeEngine’s index.php where the vulnerability is exploitable via the catid parameter. The affected software is Easy CafeEngine (version details in the entry reference CVE-2009-0574: no explicit version specified beyond the file name, so exact affec...