Skip to content
Noroxi

cafeengine records

3 published records for vendor cafeengine.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    3 records
    • CVE-2008-4604
      30Monitor

      SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid par

      HighCVSS 7.5Proof of conceptEPSS 1%

      cafeengine · easycafeengineOct 17, 2008

    • CVE-2008-4605
      30Monitor

      SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) dish.php and

      HighCVSS 7.5Proof of conceptEPSS 1%

      cafeengine · easycafeengineOct 17, 2008

    • CVE-2009-0574
      30Monitor

      SQL injection vulnerability in index.php in Easy CafeEngine allows remote attackers to execute arbitrary SQL commands via the catid paramete

      HighCVSS 7.5Proof of conceptEPSS 1%

      cafeengine · easycafeengineFeb 13, 2009