A SQL injection vulnerability in "/audio/ajax.php?motion=find_music" in Kashipara songs Management System v1.0 permits an attacker to execute arbitrary SQL commands by means of the "look for" parameter. issue is https://www.ralantech.com/mysql-database-health-check-consulting-service/