A vulnerability identified as critical has been detected in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown functionality of the file /Administrator/PHP/AdminEditCategory.php. The manipulation of the argument ID leads to sql injection.
This vulnerability is uniquely identified as CVE-2026-2212. The attack is possible to be carried out remotely. Moreover, an exploit is present.