PT-2025-43912 · Amtt · Amtt Hotel Broadband Operation System

Guapiqing · Published 2025-10-27 · Updated 2025-10-27 · CVE-2025-12253

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AMTT Hotel Broadband Operation System version 1.0

Description A flaw exists in AMTT Hotel Broadband Operation System that allows for SQL injection. This issue is related to an unknown functionality within the /user/portal/get expiredtime.php file. Manipulation of the uid argument can trigger the SQL injection. The attack can be initiated remotely. The exploit for this issue has been publicly disclosed, and the vendor was notified but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-12253

Affected Products

Amtt Hotel Broadband Operation System

References · 8

• 🔥 https://github.com/guapiqing/cve/issues/3 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-12253 · Security Note
• https://osv.dev/vulnerability/CVE-2025-12253 · Vendor Advisory
• https://t.me/CVEtracker/35814 · Telegram Post
• https://vuldb.com/?ctiid.329924 · Note
• https://vuldb.com/?submit.673967 · Note
• https://vuldb.com/?id.329924 · Note
• https://t.me/cveNotify/140421 · Telegram Post