The Joomla extplorer component versions 2.0.0 RC2 and below suffer from a SQL injection vulnerability.