amtt-hiboss-language-sqli: 安美数字酒店宽带运营系统SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/zan8in/pocwiki/blob/main/%E5%AE%89%E7%BE%8E%E6%95%B0%E5%AD%97%E9%85%92%E5%BA%97%E5%AE%BD%E5%B8%A6%E8%BF%90%E8%90%A5%E7%B3%BB%E7%BB%9FSQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E5%AE%89%E7%BE%8E%E6%95%B0%E5%AD%97%E9%85%92%E5%BA%97%E5%AE%BD%E5%B8%A6%E8%BF%90%E8%90%A5%E7%B3%BB%E7%BB%9F/%E5%AE%89%E7%BE%8E%E6%95%B0%E5%AD%97%E9%85%92%E5%BA%97%E5%AE%BD%E5%B8%A6%E8%BF%90%E8%90%A5%E7%B3%BB%E7%BB%9Flist_qry.php%E6%8E%A5%E5%8F%A3SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://www.cnvd.org.cn/flaw/show/CNVD-2021-39121
• https://stack.chaitin.com/poc/detail/4057
• https://ddpoc.com/DVB-2025-10278.html
• https://mrxn.net/jswz/amttgroup-user-get_ip-vlanid-sqli.html
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E5%AE%89%E7%BE%8E%E6%95%B0%E5%AD%97%E9%85%92%E5%BA%97%E5%AE%BD%E5%B8%A6%E8%BF%90%E8%90%A5%E7%B3%BB%E7%BB%9F/%E5%AE%89%E7%BE%8E%E6%95%B0%E5%AD%97%E9%85%92%E5%BA%97%E5%AE%BD%E5%B8%A6%E8%BF%90%E8%90%A5%E7%B3%BB%E7%BB%9Fget_ip.phpSQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://mrxn.net/jswz/amttgroup-get_user_enrollment-userid-sqli.html
• https://www.ddpoc.com/DVB-2024-6543.html
• https://github.com/jinghu11/Kpanda-vulnerability/blob/main/A18-1%E5%AE%89%E7%BE%8E-%E6%95%B0%E5%AD%97%E9%85%92%E5%BA%97%E5%AE%BD%E5%B8%A6%E8%BF%90%E8%90%A5%E7%B3%BB%E7%BB%9F-SQL.pdf
• https://mrxn.net/jswz/amttgroup-user-list_qry-UserID-sqli.html
• https://www.ddpoc.com/DVB-2023-4886.html
• https://cn-sec.com/archives/2137141.html
• https://github.com/adminlove520/vulnerability/blob/main/A18-2%E5%AE%89%E7%BE%8E-%E6%95%B0%E5%AD%97%E9%85%92%E5%BA%97%E5%AE%BD%E5%B8%A6%E8%BF%90%E8%90%A5%E7%B3%BB%E7%BB%9F-SQL.pdf
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E5%AE%89%E7%BE%8E%E6%95%B0%E5%AD%97%E9%85%92%E5%BA%97%E5%AE%BD%E5%B8%A6%E8%BF%90%E8%90%A5%E7%B3%BB%E7%BB%9F/%E5%AE%89%E7%BE%8E%E6%95%B0%E5%AD%97%E9%85%92%E5%BA%97%E5%AE%BD%E5%B8%A6%E8%BF%90%E8%90%A5%E7%B3%BB%E7%BB%9Fget_user_enrollment.php%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://github.com/SleepingBag945/dddd/releases
• https://www.sentinelone.com/vulnerability-database/cve-2025-13123/
• https://www.sentinelone.com/vulnerability-database/cve-2025-12253/
• https://vuldb.com/vuln/247340
• https://cn-sec.com/archives/2148336.html

Related Vulnerabilities

• PoCgeoserver-jsonarraycontains-sqli: GeoServer jsonArrayContains CQL Filter - SQL Injection
• PoCweaver-ecology9-doc-list-sqli: Weaver E-cology9 api/doc/out/more/list SQL Injection
• TOTOLINK EX200 /cgi-bin/cstecgi.cgi setLanguageCfg 命令执行漏洞
• PoCchanjet-crm-sqli: Chanjet CRM - SQL Injection
• PoCCVE-2025-8848: LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header
• PoC安美数字酒店宽带运营系统SQL注入漏洞
• amtt-hiboss-server-ping-rce: Amtt hiboss Server Ping RCE
• chanjet-tplus-checkpassword-sqli: 用友 畅捷通T+ CheckPassword SQL注入漏洞
• duomicms-sqli: Duomicms sqli
• ecology-ebridge-addtaste-sqli: 泛微云桥 taste/addTaste SQL注入
• ecology-ifnewscheckoutbycurrentuser-dwr-sqli: 泛微 E-Cology ifnewscheckoutbycurrentuser.dwr SQL 注入
• fangweicms-sqli: FangweiCMS sqli
• feiqi-parsetree-sqli: 飞企互联-FE企业运营管理平台 parseTree 接口SQL注入