Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-0574. PoCs published by SuNHouSe2.
AI-analyzed exploit summary This exploit demonstrates a remote SQL injection vulnerability in Cafe Engine by injecting a UNION-based SQL query to extract database information such as user, database name, and version.
Description
SQL injection vulnerability in index.php in Easy CafeEngine allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-4604.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by SuNHouSe2 · textwebappsphp
https://www.exploit-db.com/exploits/8002
This exploit demonstrates a remote SQL injection vulnerability in Cafe Engine by injecting a UNION-based SQL query to extract database information such as user, database name, and version.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
Cafe Engine (Easy Cafe Engine)
No auth needed
Prerequisites:
Target application must be running Cafe Engine with vulnerable parameters exposed
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (3)
Core 3
Core References
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/8002
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2009/0359
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/33655
Scores
EPSS
0.0099
EPSS Percentile
57.9%
Details
CWE
CWE-89
Status
published
Products (1)
cafeengine/easycafeengine
Published
Feb 13, 2009
Tracked Since
Feb 18, 2026