AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form.