A SQL injection vulnerability exists in itsourcecode Web-Based Internet Laboratory Management System version 1.0 in an unspecified function within /settings/controller.php. This vulnerability allows remote attackers to manipulate SQL queries, potentially leading to data confidentiality, integrity, and availability impacts. The vulnerability has a CVSS 3.1 score of 7.3 (high severity) and public exploit details have been disclosed.