This vulnerability in code-projects Online Music Site 1.0 involves SQL injection via the ID parameter in the /Administrator/PHP/AdminUpdateAlbum.php file. An attacker with high privileges can remotely manipulate this parameter to inject SQL commands. The CVSS 4.0 base score is 5.1, indicating medium severity, with network attack vector, low complexity, no user interaction, and limited confidentiality, integrity, and availability impacts. No official fix or patch has been published as of the data provided.

Successful exploitation allows an attacker with high privileges to perform SQL injection attacks remotely, potentially leading to unauthorized data access or modification within the affected application. The impact is limited to the confidentiality, integrity, and availability of the affected system as indicated by the CVSS vector. There is no evidence of widespread exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected administrative interface and validate or sanitize input parameters to mitigate SQL injection risks. Monitor for updates from the vendor regarding patches or official mitigations.