Sites powered by Restaurantbiller suffer from remote shell upload and remote SQL injection vulnerabilities.