A vulnerability labeled as critical has been found in code-projects Online Music Site 1.0. This impacts an unknown function of the file /Administrator/PHP/AdminReply.php. Such manipulation of the argument ID leads to sql injection.
This vulnerability is referenced as CVE-2026-1535. It is possible to launch the attack remotely. Furthermore, an exploit is available.
