CVE-2024-41476
CRITICALAMTT HiBOS < 3.0.3.151204 - SQL Injection via /manager/card/card_detail.php
Title source: llmDescription
AMTT Hotel Broadband Operation System (HiBOS) V3.0.3.151204 and before is vulnerable to SQL Injection via /manager/card/card_detail.php.
References (2)
Core 2
Core References
Third Party Advisory
https://gist.github.com/lidy4x1/3314fbd82c3d72831c16f9c47a9bfb11
Product
https://www.amttgroup.com/
Scores
CVSS v3
9.8
EPSS
0.0060
EPSS Percentile
44.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
total
Details
CWE
CWE-79
Status
published
Products (1)
amttgroup/hibos
< 3.0.3.151204
Published
Aug 12, 2024
Tracked Since
Feb 18, 2026