Threats tagged 'ghsa-q4q5-w3mj-86x5'

CVE-2026-7697 is a SQL injection vulnerability in AMTT Hotel Broadband Operation System 1.0, specifically in the /manager/card/cardhand_submit.php file. The vulnerability arises from improper handling of the ID argument, allowing remote attackers to manipulate SQL queries. The exploit has been publicly disclosed, but the vendor has not responded or provided a fix. The vulnerability has a medium severity score of 4.7.