Sql injection

Multiple SQL injection vulnerabilities in the BookLibrary Basic combooklibrary component 1.5.3 before 1.5.320100620 for Joomla! allow remote attackers to execute arbitrary SQL commands via the bid parameter in a 1 lendrequest or 2 savelendrequest action to index.php, the id parameter in a 3...