AMTT Hotel Broadband Operation System vulnerabilities

A SQL injection vulnerability has been found in AMTT Hotel Broadband Operation System 1.0 in the file manager/network/switch_status.php. Manipulating the ID argument allows remote exploitation. The exploit has been published and may be used.

A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0 in an unknown function of the file /manager/card/cardhand_submit.php. Manipulation of the argument ID causes SQL injection, and remote exploitation is possible. The exploit has been publicly disclosed and may be utilized.

A security flaw was discovered in AMTT Hotel Broadband Operation System 1.0 affecting the file /manager/card/cardmake_down.php. Manipulation of the ID argument results in SQL injection, and the attack can be initiated remotely. The exploit has been released to the public and may be exploited.