A SQL injection vulnerability exists in itsourcecode Web-Based Internet Laboratory Management System 1.0 in the /enrollment/controller.php file. This vulnerability allows remote attackers to manipulate input to execute unauthorized SQL commands. Public exploit code is available, increasing the risk of exploitation. The vulnerability has a high severity rating with a CVSS score of 7.3.