Music Collection [com_muscol], 2.4.6 and below, SQL Injection

Fixed in 2.4.10

Notice: http://www.joomlathat.com/news/music-collection/music-collection-2-4-9-released-security-release-2 

Please contact the developer for more information