Vulnerabilities > Detodas
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2008-03-24 | CVE-2008-1465 | SQL Injection vulnerability in Detodas COM Restaurante 1.0 SQL injection vulnerability in the Detodas Restaurante (com_restaurante) 1.0 component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php, a different product than CVE-2008-0562. | 9.3 |
| 2007-09-11 | CVE-2007-4817 | Code Injection vulnerability in Detodas Restaurante Component FOR Joomla Unrestricted file upload vulnerability in the Restaurante (com_restaurante) component for Joomla! allows remote attackers to upload and execute arbitrary PHP code via an upload action specifying a filename with a double extension such as .php.jpg, which creates an accessible file under img_original/. | 7.5 |