Bug 17902: Fix possible SQL injection in serials editing