MaDj0kEr has reported some vulnerabilities in Amphor@ GATE, which potentially can be exploited by malicious users to bypass certain security restrictions.

The problem is that certain scripts can be accessed directly without any authentication. This may be exploited to get free Internet access without time limitation or access the management system.

Examples:
https://amphora.local/gui/free_loginpage.php
https://amphora.local/hotel/cualquierfichero
https://amphora.local/validacion.php

Solution
Deny direct access without authentication to the vulnerable scripts.

Provided and/or discovered by
MaDj0kEr, KernelPanik Crew

Original Advisory
http://www.kernelpanik.org/docs/kernelpanik/amphora.pdf

Deep Links
Links available in Customer Area