CVE-2025-12253 AMTT Hotel Broadband Operation System get_expiredtime.php sql injection

A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/portal/getexpiredtime.php. This manipulation of the argument uid causes sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2025-12253

AMTT Hotel Broadband Operation System 1.0 is affected by an SQL injection in the /user/portal/get_expiredtime.php endpoint. The vulnerability stems from manipulating the uid parameter, enabling remote exploitation. Public exploit exists and has been disclosed; the vendor was contacted but did not...

PT-2025-43145

Name of the Vulnerable Software and Affected Versions AMTT Hotel Broadband Operation System HiBOS affected versions not specified Description The software contains an unauthenticated command injection issue in the /manager/radius/server ping.php endpoint. The application builds a shell command...

AMTT Hotel Broadband Operation System 安全漏洞

AMTT Hotel Broadband Operation System is a hotel broadband operation system from China-based AmTech Century AMTT. A security vulnerability exists in the AMTT Hotel Broadband Operation System, which originates from an unauthenticated command injection in the /manager/radius/serverping.php endpoint...

EUVD-2023-58870

Malicious code in bioql PyPI...

EUVD-2025-7390

Malicious code in bioql PyPI...

EUVD-2024-33621

Malicious code in bioql PyPI...

EUVD-2024-33620

Malicious code in bioql PyPI...

EUVD-2025-12430

Malicious code in bioql PyPI...

CVE-2024-11051

A vulnerability was found in AMTT Hotel Broadband Operation System up to 3.0.3.151204. It has been classified as critical. Affected is an unknown function of the file /manager/frontdesk/onlinestatus.php. The manipulation of the argument AccountID leads to sql injection. It is possible to launch t...

CVE-2024-11050

A vulnerability was found in AMTT Hotel Broadband Operation System up to 3.0.3.151204 and classified as problematic. This issue affects some unknown processing of the file /language.php. The manipulation of the argument LangID/LangName/LangEName leads to cross site scripting. The attack may be...

CVE-2025-3983

A vulnerability has been found in AMTT Hotel Broadband Operation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manager/system/nlogdown.php. The manipulation of the argument ProtocolType leads to command injection. The attack can be...

CVE-2025-3983

A vulnerability has been found in AMTT Hotel Broadband Operation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manager/system/nlogdown.php. The manipulation of the argument ProtocolType leads to command injection. The attack can be...

CVE-2025-3983

A vulnerability has been found in AMTT Hotel Broadband Operation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manager/system/nlogdown.php. The manipulation of the argument ProtocolType leads to command injection. The attack can be...

CVE-2025-3983 AMTT Hotel Broadband Operation System nlog_down.php command injection

A vulnerability has been found in AMTT Hotel Broadband Operation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manager/system/nlogdown.php. The manipulation of the argument ProtocolType leads to command injection. The attack can be...

CVE-2025-3983 AMTT Hotel Broadband Operation System nlog_down.php command injection

A vulnerability has been found in AMTT Hotel Broadband Operation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manager/system/nlogdown.php. The manipulation of the argument ProtocolType leads to command injection. The attack can be...

CVE-2025-3983

AMTT Hotel Broadband Operation System v1.0 is affected by a command injection in an unknown functionality of /manager/system/nlog_down.php when the ProtocolType parameter is manipulated. Exploitation is remote, and multiple sources describe that the vulnerability can lead to full impact on confid...

PT-2025-18012 · Unknown · Amtt Hotel Broadband Operation System

Name of the Vulnerable Software and Affected Versions: AMTT Hotel Broadband Operation System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /manager/system/nlog down.php. The manipulation of the ProtocolType argument leads to...

CVE-2025-2701

A vulnerability classified as critical was found in AMTT Hotel Broadband Operation System 1.0. This vulnerability affects the function popen of the file /manager/network/portsetup.php. The manipulation of the argument SwitchVersion/SwitchWrite/SwitchIP/SwitchIndex/SwitchState leads to os command...

CVE-2025-2701

A vulnerability classified as critical was found in AMTT Hotel Broadband Operation System 1.0. This vulnerability affects the function popen of the file /manager/network/portsetup.php. The manipulation of the argument SwitchVersion/SwitchWrite/SwitchIP/SwitchIndex/SwitchState leads to os command...