A SQL injection vulnerability exists in itsourcecode Web-Based Internet Laboratory Management System 1.0 in the /course/controller.php file. This vulnerability allows remote attackers to manipulate an unknown function leading to unauthorized SQL commands execution. The vulnerability has a CVSS score of 7.3, indicating high severity, and public exploit details have been disclosed.