The vulnerability permits an attacker to inject arbitrary SQL statements via the /music/view_music.php endpoint in the SourceCodester Simple Music Cloud Community System. This flaw could allow unauthorized read, modify, or delete operations on the underlying database, compromising data confidentiality and integrity. The weakness aligns with SQL Injection, facilitating manipulation of SQL queries due to insufficient input sanitization.

Application: SourceCodester Simple Music Cloud Community System, Version 1.0. No other affected vendors or products are listed. The flaw resides only within the mentioned file of this version.

Because the vulnerability is exploitable through the web interface, the attack vector is inferred to be remote over HTTP/HTTPS. No EPSS score is available and the issue is not in CISA’s KEV catalog, implying limited known exploitation. The CVSS score of 7.3 denotes high severity; nonetheless, SQL Injection remains a critical vulnerability that attackers can exploit to modify or retrieve database content.