SQL injection vulnerability in the Jumi (com_jumi) component 2.0.3 and possibly other versions for Joomla allows remote attackers to execute arbitrary SQL commands via the fileid parameter to index.php.
https://www.exploit-db.com/exploits/8968
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-2098
http://www.securityfocus.com/bid/35384