Joomla XMap component version 2.3.0 suffers from database disclosure and remote SQL injection vulnerabilities.