Joomla RedShop component version 2.0.0.3 suffers from database disclosure and remote SQL injection vulnerabilities.