J-BusinessDirectory 4.5.4 and previous sql injection

resolution: update to 4.5.5

update notice: http://www.cmsjunkie.com/blog/joomla_business_directory_4-5-5_release/