A SQL injection vulnerability has been discovered in code-projects Online Music Site version 1.0. The vulnerability affects the /Administrator/PHP/AdminUpdateUser.php file where manipulation of the ID argument leads to SQL injection. The attack can be executed remotely and exploits have been publicly released, making this an active threat. The vulnerability allows attackers to potentially access or manipulate database information through the compromised parameter.