SQL Injection exists in the Tumder (An Arcade Games Platform) 2.1 component for Joomla! via the PATH_INFO to the category/ URI.Referenceshttps://www.exploit-db.com/exploits/43866/