AMTT vulnerabilities
We track 7 vulnerabilities in AMTT products across 2 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on December 5, 2025.
Latest AMTT vulnerabilities
- 7.2 High severity
Hotel Broadband Operation System: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in AMTT Hotel Broadband Operation System 1.0. This affects an unknown part of the file /manager/card/cardmake_down.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the atta
- 9.8 Critical severity
Hotel Broadband Operation System: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in AMTT Hotel Broadband Operation System 1.0. The impacted element is an unknown function of the file /user/portal/get_firstdate.php. Executing manipulation of the argument uid can lead to sql injection. It is possible to launch the attac
- 9.8 Critical severity
Hotel Broadband Operation System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/portal/get_expiredtime.php. This manipulation of the argument uid causes sql injection. The attack may be
- 7.2 High severity
Hotel Broadband Operation System: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in AMTT Hotel Broadband Operation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manager/system/nlog_down.php. The manipulation of the argument ProtocolType leads to
- 9.8 Critical severity
Hotel Broadband Operation System: Improper Neutralization of Special Elements used in an OS Command
A vulnerability classified as critical was found in AMTT Hotel Broadband Operation System 1.0. This vulnerability affects the function popen of the file /manager/network/port_setup.php. The manipulation of the argument SwitchVersion/SwitchWrite/SwitchIP/Switch
- 8.8 High severity
Hotel Broadband Operation System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in AMTT Hotel Broadband Operation System up to 3.0.3.151204. It has been classified as critical. Affected is an unknown function of the file /manager/frontdesk/online_status.php. The manipulation of the argument AccountID leads to sql
- 9.8 Critical severity
HiBOS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in AMTT HiBOS 1.0. Affected by this issue is some unknown functionality. The manipulation of the argument Type leads to sql injection. The attack may be launched remotely. The exploit has been d