An SQL Injection vulnerability exists in Sourcecodester Online Reviewer System 1.0 via the password parameter.