← Database

CVE-2008-4605

HIGH CVSS: 7.5 Published: 2008-10-18 Modified: 2026-06-16

Description

SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) dish.php and (2) menu.php.

Affected Platforms

Cafeengine Easycafeengine

Weakness Type

CWE-89

References