Vulnerability Description
A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/portal/get_expiredtime.php. This manipulation of the argument uid causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Amttgroup | Hibos | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/guapiqing/cve/issues/3ExploitIssue Tracking
- https://vuldb.com/?ctiid.329924Permissions RequiredVDB Entry
- https://vuldb.com/?id.329924Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.673967Third Party AdvisoryVDB Entry
FAQ
What is CVE-2025-12253?
CVE-2025-12253 is a vulnerability with a CVSS score of 7.3 (HIGH). A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/portal/get_expiredtime.php. This manipulation ...
How severe is CVE-2025-12253?
CVE-2025-12253 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-12253?
Check the references section above for vendor advisories and patch information. Affected products include: Amttgroup Hibos.