SQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla! via the divid parameter.Referenceshttps://exploit-db.com/exploits/44107