Apartment Visitor Management System v1.0 is vulnerable to SQL Injection via /avms/index.php.
CWE-89, CWE-89