Joomla! Staff Master component versions 1.0 RC1 and below suffers from a remote SQL injection vulnerability. Continue reading...