Joomla version 1.5.26 with EstateAgent component version 3.x suffers from a remote SQL injection vulnerability.