A vulnerability categorized as critical has been discovered in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PHP/AdminUpdateAlbum.php. Such manipulation of the argument ID leads to sql injection.
This vulnerability is traded as CVE-2026-10171. The attack may be launched remotely. Furthermore, there is an exploit available.
