CVE-2025-14090

The CVE-2025-14090 entry concerns AMTT Hotel Broadband Operation System 1.0. A SQL injection is triggered by manipulating the ID parameter in the file /manager/card/cardmake_down.php, with remote applicability. The root cause is improper handling of the ID input leading to injection, enabling una...

EUVD-2025-175364

A flaw has been found in AMTT Hotel Broadband Operation System 1.0. The impacted element is an unknown function of the file /user/portal/getfirstdate.php. Executing manipulation of the argument uid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-12253

A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/portal/getexpiredtime.php. This manipulation of the argument uid causes sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2025-12253

AMTT Hotel Broadband Operation System 1.0 is affected by an SQL injection in the /user/portal/get_expiredtime.php endpoint. The vulnerability stems from manipulating the uid parameter, enabling remote exploitation. Public exploit exists and has been disclosed; the vendor was contacted but did not...

EUVD-2025-7390

Malicious code in bioql PyPI...

CVE-2024-11050

A vulnerability was found in AMTT Hotel Broadband Operation System up to 3.0.3.151204 and classified as problematic. This issue affects some unknown processing of the file /language.php. The manipulation of the argument LangID/LangName/LangEName leads to cross site scripting. The attack may be...