Joomla PrayerCenter version 3.0.4 suffers from database disclosure and remote SQL injection vulnerabilities.