← Back

Whorl Ltd

whorl_ltd

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Jshop Server
jshop_server
1 CVE
Jshop
jshop
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-3835
1Whorl Ltd
1Jshop
Apr 23, 2026
Nov 2, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the JShop (com_jshop) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a product action to index.php.
CVE-2008-1624
1Whorl Ltd
1Jshop Server
Apr 23, 2026
Apr 2, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the xPage parameter.