CVE-2010-4977

The CVE-2010-4977 entry concerns a SQL injection in the Joomla! component Canteen (com_canteen) version 1.0. The flaw is in menu.php, where the mealid parameter passed to index.php can be exploited by remote attackers to execute arbitrary SQL commands. Connected documents corroborate the affected...