← Back

Weborange

weborange

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Price Alert
price_alert
1 CVE
Bargain Product Vm3
bargain_product_vm3
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-20261
1Weborange
1Bargain Product Vm3
Aug 19, 2026
Jun 19, 2026
8.8 HIGH· v4
8.2 HIGH· v3
N/A· v2
Joomla! Component Bargain Product VM3 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the product_id parameter. Attac...Show more
Joomla! Component Bargain Product VM3 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the product_id parameter. Attackers can supply crafted SQL statements in GET requests to the brainy and alice views to extract sensitive database information.Show less
CVE-2017-20260
1Weborange
1Price Alert
Aug 19, 2026
Jun 19, 2026
8.8 HIGH· v4
8.2 HIGH· v3
N/A· v2
Joomla! Component Price Alert 3.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the product_id parameter. Attackers c...Show more
Joomla! Component Price Alert 3.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the product_id parameter. Attackers can send requests to the subscribeajax view with crafted SQL payloads in the product_id parameter to extract sensitive database information including credentials and configuration data.Show less