SQL injection vulnerability in menu.php in the Canteen (com_canteen) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the mealid parameter to index.php.
https://exchange.xforce.ibmcloud.com/vulnerabilities/60103
http://www.securityfocus.com/archive/1/512170/100/0/threaded
http://securityreason.com/securityalert/8495