SQL injection vulnerability in after_str parameter on JYmusic SongsController.class.php page

JYmusic is an open source cross-platform music management system. A SQL injection vulnerability exists in the afterstr parameter on the JYmusic SongsController.class.php page. A remote attacker can exploit the vulnerability to obtain sensitive database information...