The vulnerability is a SQL injection in /music/view_genre.php of SourceCodester Simple Music Cloud Community System v1.0. The code fails to properly sanitize input parameters, enabling an attacker to inject arbitrary SQL statements. This can lead to reading, modifying, or deleting data from the underlying database, representing a potential data breach or loss of integrity.

The affected system is SourceCodester Simple Music Cloud Community System, version 1.0.

The attack vector is inferred to be remote via the web interface, as the vulnerable file is accessed by HTTP requests. No CVSS score or EPSS value is available, and the vulnerability is not in the CISA KEV catalog. Consequently, the likelihood of exploitation is unknown, but typical SQL injection risk is considered significant, especially if the database user has high privileges and the application lacks input validation or parameterization. Prompt remediation is recommended.