Mojoomla WPAMS Apartment Management System for WordPress allows SQL Injection via the id parameter.
dasinfomedia wpams apartment management system -