A SQL injection vulnerability exists in the itsourcecode Web-Based Internet Laboratory Management System 1.0 in the /subject/controller.php file. This vulnerability allows remote attackers to manipulate SQL queries, potentially leading to unauthorized data access or modification. The vulnerability has a high severity score of 7.3 and public exploit code is available.