A SQL injection vulnerability has been identified in itsourcecode Online House Rental System 1.0. The vulnerability affects the /ajax.php?action=login file where manipulation of the Username parameter leads to SQL injection. The attack can be performed remotely and a public exploit is available. The impacted element is an unknown function within the login functionality. This vulnerability poses a significant risk as it allows remote attackers to potentially access or manipulate the database.