Vulnerabilities

TI-2025-12875 CVE-2025-14090 · GHSA-9v79-v52c-q97w

AMTT Hotel Broadband Operation System cardmake_down.php sql injection

MEDIUM 56

A security flaw has been discovered in AMTT Hotel Broadband Operation System 1.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00365 Published 2025-12-05 No fix listed CWE-74

TI-2025-11996 CVE-2025-13123 · GHSA-w957-wf7w-cwmp

AMTT Hotel Broadband Operation System get_firstdate.php sql injection

MEDIUM 57

A flaw has been found in AMTT Hotel Broadband Operation System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00367 Published 2025-11-13 No fix listed CWE-74

TI-2025-11236 CVE-2025-12253 · GHSA-7g5g-7gpg-qrm6

AMTT Hotel Broadband Operation System get_expiredtime.php sql injection

HIGH 70

A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00437 Published 2025-10-27 No fix listed CWE-74

TI-2016-09168 CVE-2016-15048 · GHSA-9q3m-rvj5-q6fv

AMTT HiBOS Command Injection RCE via server_ping.php

HIGH 82

AMTT Hotel Broadband Operation System (HiBOS) contains an unauthenticated command injection vulnerability in the /manager/radius/server_ping.php endpoint.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.07357 Published 2025-10-22 No fix listed CWE-78

TI-2025-03526 CVE-2025-3983 · GHSA-42jq-cg85-cj5g

AMTT Hotel Broadband Operation System nlog_down.php command injection

MEDIUM 56

A vulnerability has been found in AMTT Hotel Broadband Operation System 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.17936 Published 2025-04-27 No fix listed CWE-74

TI-2025-02361 CVE-2025-2701 · GHSA-gh82-hcx7-wmwv

AMTT Hotel Broadband Operation System port_setup.php popen os command injection

MEDIUM 57

A vulnerability classified as critical was found in AMTT Hotel Broadband Operation System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.07422 Published 2025-03-24 No fix listed CWE-77

TI-2024-10239 CVE-2024-11051 · GHSA-52h5-6hgx-mqhx

AMTT Hotel Broadband Operation System online_status.php sql injection

MEDIUM 57

A vulnerability was found in AMTT Hotel Broadband Operation System up to 3.0.3.151204.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00542 Published 2024-11-10 No fix listed CWE-74

TI-2024-10238 CVE-2024-11050 · GHSA-hhfp-82pj-8p6h

AMTT Hotel Broadband Operation System language.php cross site scripting

MEDIUM 57

A vulnerability was found in AMTT Hotel Broadband Operation System up to 3.0.3.151204 and classified as problematic.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00412 Published 2024-11-10 No fix listed CWE-79

TI-2024-27647 CVE-2024-41476 · GHSA-f8mp-x4p7-qqwp

AMTT Hotel Broadband Operation System (HiBOS) V3.0.3.151204 and before is vulnerable to…

MEDIUM 50

AMTT Hotel Broadband Operation System (HiBOS) V3.0.3.151204 and before is vulnerable to SQL Injection via /manager/card/card_detail.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.006 Published 2024-08-09 No fix listed CWE-79

TI-2024-26170 CVE-2024-39072 · GHSA-46v2-fwph-wxrx

AMTT Hotel Broadband Operation System (HiBOS) v3.0.3.151204 is vulnerable to SQL…

LOW 27

AMTT Hotel Broadband Operation System (HiBOS) v3.0.3.151204 is vulnerable to SQL injection via manager/conference/calendar_remind.php.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00396 Published 2024-07-09 No fix listed CWE-89

TI-2023-06088 CVE-2023-6647 · GHSA-x2cf-p4c4-3f6q

AMTT HiBOS sql injection

HIGH 81

A vulnerability, which was classified as critical, has been found in AMTT HiBOS 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01032 Published 2023-12-10 No fix listed CWE-89

Vulnerabilities

Filters