CVE-2008-4604

CVE-2008-4604 affects Easy CafeEngine 1.1. Affected component: index.php. Vulnerability: SQL injection in the itemid parameter in index.php, enabling remote execution of arbitrary SQL commands. Root cause: improper sanitization of input leading to SQL injection. Impact as stated by sources: parti...

CVE-2008-4605

CVE-2008-4605 describes an SQL injection vulnerability in CafeEngine. The vulnerability affects the id parameter in two scripts, dish.php and menu.php, allowing remote attackers to execute arbitrary SQL commands. This is the explicit compromise path described in the connected documents. The avail...