Description
A SQL injection vulnerability exists in FaScript FaPersian Petition through the show.php script. Input parameters are not properly sanitized before being used in database queries.
Impact
Attackers can extract petition data, user information, and administrative credentials from the database.
Solution
Apply parameterized queries. Validate all user input before database operations.