Joomla JoomLeague component version 2.x suffers from database disclosure and remote SQL injection vulnerabilities.