Joomla Mac Gallery component versions 1.5 and below suffer from an arbitrary file download vulnerability.