Michaelchong

**Name of the Vulnerable Software and Affected Versions** AMTT Hotel Broadband Operation System version 1.0 **Description** A flaw exists in the `manager/network/switch status.php` endpoint. A remote attacker can perform a SQL injection by manipulating the `ID` argument. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `ID` parameter in the `manager/network/switch status.php` endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Jinher OA C6 (affected versions not specified) **Description** A SQL injection flaw exists in the file '/C6/JHSoft.Web.ModuleCount/GetFormSn.aspx'. A remote attacker can exploit this by manipulating the `queryID` argument. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to interfere with the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul e-Diary Management System version 1.0 **Description** A critical vulnerability was found in the PHPGurukul e-Diary Management System, affecting some unknown functionality of the file /manage-categories.php. The manipulation of the `ID` argument leads to SQL injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. **Recommendations** As a temporary workaround, consider disabling the functionality related to the /manage-categories.php file until a patch is available. Restrict access to the `ID` argument in the affected API endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AMTT Hotel Broadband Operation System version 1.0 **Description** A critical issue has been found in the system, affecting an unknown functionality of the file /manager/system/nlog down.php. The manipulation of the `ProtocolType` argument leads to command injection. This issue can be exploited remotely. Other parameters might also be affected. **Recommendations** For AMTT Hotel Broadband Operation System version 1.0, as a temporary workaround, consider restricting access to the /manager/system/nlog down.php file until a patch is available. Avoid using the `ProtocolType` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.