CVE-2024-39072

Name of the Vulnerable Software and Affected Versions AMTT Hotel Broadband Operation System (HiBOS) version 3.0.3.151204

Description The issue concerns SQL injection via the "manager/conference/calendar remind.php" API endpoint. This allows for potential unauthorized access to sensitive data.

Recommendations For version 3.0.3.151204, as a temporary workaround, consider restricting access to the "manager/conference/calendar remind.php" API endpoint until a patch is available. Avoid using potentially vulnerable parameters in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.