Threats tagged 'ghsa-w957-wf7w-cwmp'

A SQL injection vulnerability exists in AMTT Hotel Broadband Operation System 1.0 in the /user/portal/get_firstdate.php file via manipulation of the uid parameter. This flaw allows remote attackers with low privileges to execute SQL injection attacks. Exploit code has been published, but the vendor has not responded or issued a fix. The vulnerability has a medium severity rating with a CVSS score of 6.3.