Joomla Zoo by YooTheme component version 3.3.10 suffers from database disclosure and remote SQL injection vulnerabilities.