CVE-2007-4817 Unrestricted file upload vulnerability in the Restaurante (com_restaurante) component for Joomla! allows remote attackers to upload and execute arbitrary PHP code via an upload action specifying a fil...
HighCVSS 7.5
EPSS 7.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in the Restaurante (com_restaurante) component for Joomla! allows remote attackers to upload and execute arbitrary PHP code via an upload action specifying a filename with a double extension such as .php.jpg, which creates an accessible file under img_original/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| detodas restaurante component for joomla | All versions | No fix listed |
References
- 26756 third-party-advisory
- [VIM] 20070911 MIL 4383 mailing-list
- 25612 vdb-entry
- ADV-2007-3139 vdb-entry
- comprestaurante-index-file-upload(36538) vdb-entry
- 4383 exploit