Sevban Dönmez

An incorrect authorization issue in the software allows for privilege escalation, which occurs when a user can gain higher access levels than intended.

The software contains an Improper Neutralization of Input During Web Page Generation, leading to a Reflected Cross-Site Scripting (XSS) condition. This allows for the execution of malicious scripts through the injection of untrusted data during web page generation. The vendor was contacted regarding this issue but did not provide a response.

A flaw exists in Aida Computer Information Technology Inc. Hotel Guest Hotspot that allows for SQL Injection due to improper neutralization of special elements used in an SQL command. The vulnerability could potentially allow an attacker to manipulate database queries. The vendor was contacted regarding this issue but did not respond.