Security Joomla Face Gallery 1.0 SQL Injection / File Download September 22, 2014 007admin Joomla Face Gallery component version 1.0 suffers from remote SQL injection and arbitrary file download vulnerabilities.