The Mambo/Joomla component rsgallery versions 2.0 beta 5 and below suffer from a remote SQL injection vulnerability.