A SQL injection vulnerability exists in itsourcecode Web-Based Internet Laboratory Management System version 1.0, specifically in an unknown function within /user/controller.php. This flaw allows remote attackers to execute SQL injection attacks without authentication. Exploit code has been published, increasing the risk of exploitation.