Description
A remote SQL injection vulnerability exists in FaScript FaMp3 version 1 through the show.php script. The parameter is not properly sanitized before database operations.
Impact
Attackers can extract all data from the database including MP3 metadata, user information, and administrative credentials.
Solution
Apply parameterized queries to show.php. Validate all user input.