CVE-2007-4817

Unrestricted file upload vulnerability in the Restaurante (com_restaurante) component for Joomla!

published September 11, 2007

CVSS
—
EPSS
7%
Percentile
94.3
In the wild
Unconfirmed
What it is

Unrestricted file upload vulnerability in the Restaurante (com_restaurante) component for Joomla! allows remote attackers to upload and execute arbitrary PHP code via an upload action specifying a filename with a double extension such as .php.jpg, which creates an accessible file under img_original/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07268 · 94.3th percentile
Published
2007-09-11T19:00Z
EPSS history
Timeline
  • 11 SEP 19:00Z
    Unrestricted file upload vulnerability in the Restaurante (com_restaurante) component for Joomla!
    cvelistv5