Joomla PhocaMaps version 3.0.5 suffers from database disclosure and remote SQL injection vulnerabilities.