Description
A SQL injection vulnerability exists in FaScript FaPersianHack version 1 through the show.php script. The parameter is not properly sanitized before being used in SQL queries.
Impact
Attackers can inject arbitrary SQL commands to extract all data from the database, including user credentials and application data.
Solution
Apply parameterized queries to show.php. Upgrade to a maintained script.