6 matches found
CVE-2024-40317
A reflected cross-site scripting XSS vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter HTTP...
EUVD-2024-55360
MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerability via the intmenu parameter...
PT-2025-52681
Name of the Vulnerable Software and Affected Versions MyNET versions 26.06 and earlier Description An iframe injection issue exists that allows a remote attacker to execute arbitrary code. The issue is related to the src parameter. Recommendations Versions prior to 26.06 should be updated...
CVE-2024-25814
The MyNET online management system (developed by AIRC Portugal ) is vulnerable to a reflected cross-site scripting (XSS) flaw in versions up to v26.05 . The issue stems from improper neutralization of input via the msg parameter , which could allow an attacker to inject malicious scripts into web...