CVE-2007-4817: Code Injection
Unrestricted file upload vulnerability in the Restaurante (comrestaurante) component for Joomla! allows remote attackers to upload and execute arbitrary PHP code via an upload action specifying a filename with a double extension such as .php.jpg, which creates an accessible file under imgoriginal/.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4817?
CVE-2007-4817 is classified as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2007-4817?
To fix CVE-2007-4817, update the Restaurante component for Joomla! to a version that eliminates the unrestricted file upload functionality.
What types of attacks can exploit CVE-2007-4817?
Attackers can exploit CVE-2007-4817 to upload and execute malicious PHP scripts on the server.
Which versions of Joomla! are affected by CVE-2007-4817?
CVE-2007-4817 affects Joomla! sites using the Detodas Restaurante component that do not have mitigations in place.
What is the impact of CVE-2007-4817 on a Joomla! website?
The impact of CVE-2007-4817 on a Joomla! website can result in unauthorized access and control of the server where the component is installed.