AMTT Hotel Broadband Operation System SQL Injection Vulnerability

A SQL injection vulnerability has been identified in AMTT Hotel Broadband Operation System version 1.0. The issue resides in the file '/manager/card/cardmake_down.php', where manipulation of the 'id' parameter allows for SQL injection. This vulnerability can be exploited remotely, and an exploit is publicly available.

Impact

Exploitation of this vulnerability allows attackers to perform SQL injection, potentially leading to unauthorized access to the database and server privileges.

Reproduction

The vulnerability can be reproduced by sending a crafted HTTP GET request to '/manager/card/cardmake_down.php' with an injected 'id' parameter. The injection can be verified by using payloads that, for example, extract the database name.