Executive Summary: the Joomla Ext. jomEstate Pro has been reported to be vulnerable to a SQL Injection Attack. The affected version is 1.3.6 and potentially others.

Technical details: The "district" parameter in the search form does not properly sanitize its input.

Recommendation: currently the vendor of this - http://www.comdev.eu - does not list a new version or a patch. It is suggested that you make a full backup, including the database and contact the vendor for a patch.

Source: http://www.1337day.com/exploits/16135