A SQL injection vulnerability has been identified in code-projects Inventory Management System version 1.0. The vulnerability affects the Login component where manipulation of the Username argument can lead to SQL injection attacks. The attack can be launched remotely and exploits have been made publicly available, increasing the risk of active exploitation against affected systems.