Joomla BreezingForms version 1.9.0 suffers from database disclosure and remote SQL injection vulnerabilities.