Joomla BookLibrary version 4.0.31 suffers from database disclosure and remote SQL injection vulnerabilities.