A SQL injection vulnerability was discovered in code-projects Online Music Site version 1.0. The vulnerability affects the /Administrator/PHP/AdminEditAlbum.php file through manipulation of the ID parameter. The attack can be performed remotely and the exploit has been publicly disclosed. This allows attackers to potentially access, modify, or extract sensitive data from the application's database through malicious SQL queries.