The Joomla component Prayercenter versions 1.4.9 and below suffer from a remote SQL injection vulnerability.