A vulnerability categorized as critical has been discovered in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PHP/AdminViewSongs.php. Executing a manipulation of the argument ID can lead to sql injection.
This vulnerability is registered as CVE-2026-0607. It is possible to launch the attack remotely. Furthermore, an exploit is available.
