Car-Booking-System-PHP version 1.0 contains a critical SQL Injection vulnerability in the /carlux/sign-in.php script. This flaw allows unauthenticated remote attackers to execute arbitrary SQL commands, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system.