CVE-2010-1531

CVE-2010-1531 describes a directory traversal (Local File Inclusion) vulnerability in the Joomla! extension redSHOP (com_redshop) 1.0.x, allowing remote attackers to read arbitrary files by injecting a ".." path in the view parameter to index.php. The issue stems from insufficient sanitization of...

CVE-2010-2694

CVE-2010-2694 is an SQL injection vulnerability in the Joomla! redSHOP component (com_redshop) 1.0 . The flaw allows a remote attacker to execute arbitrary SQL commands via the pid parameter to index.php. This is the underlying cause and the documented impact across sources, with potential data e...