CVE-2024-39037

MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerability via the intmenu parameter...

CVE-2024-40317

A reflected cross-site scripting XSS vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter HTTP...

CVE-2024-35322

MyNET up to v26.08 was discovered to contain a reflected cross-site scripting XSS vulnerability via the ficheiro parameter...

CVE-2024-39037

MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerability via the intmenu parameter...

CVE-2024-39037

MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerability via the intmenu parameter...

CVE-2024-40317

A reflected cross-site scripting XSS vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter HTTP...

CVE-2024-40317

A reflected cross-site scripting XSS vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter HTTP...

CVE-2024-35322

MyNET up to v26.08 was discovered to contain a reflected cross-site scripting XSS vulnerability via the ficheiro parameter...

CVE-2024-35322

MyNET up to v26.08 was discovered to contain a reflected cross-site scripting XSS vulnerability via the ficheiro parameter...

CVE-2024-40317

A reflected cross-site scripting XSS vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter HTTP...

CVE-2024-39037

MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerability via the intmenu parameter...

PT-2025-53300

Name of the Vulnerable Software and Affected Versions MyNET versions prior to 26.09 Description A reflected cross-site scripting XSS issue exists in MyNET. This allows attackers to execute arbitrary code within a user's browser by injecting a malicious payload into the HTTP parameter...

CVE-2024-35322

MyNET up to v26.08 was discovered to contain a reflected cross-site scripting XSS vulnerability via the ficheiro parameter...

CVE-2024-39037

The AIRC MyNET online management system (versions up to v26.08.316 ) is vulnerable to an unauthenticated SQL injection attack. The root cause is the insufficient validation of the intmenu parameter, which could allow an attacker to gain unauthorized access to the underlying database. To mitigate ...

CVE-2024-40317

A reflected cross-site scripting (XSS) vulnerability exists in the MyNET management system (developed by AIRC Portugal) in versions up to v26.08 . The root cause is the improper handling of HTTP parameters , which allows an attacker to inject a crafted payload into the HTTP parameter . Successful...

CVE-2024-35322: Improper Neutralization of Input During Web Page Generation

MyNET up to v26.08 was discovered to contain a reflected cross-site scripting XSS vulnerability via the ficheiro parameter...

CVE-2024-35322

AIRC MyNET (an online management system) versions up to v26.08 are susceptible to a reflected cross-site scripting (XSS) vulnerability. The root cause is the improper handling of the ficheiro parameter , which allows for the execution of malicious code within the application context. To remediate...

PT-2025-53297

Name of the Vulnerable Software and Affected Versions MyNET versions up to 26.08.316 Description The software contains an unauthenticated SQL Injection issue through the intmenu parameter. This allows for potential unauthorized access to the database. Recommendations Update MyNET to a version lat...

EUVD-2024-55361

MyNET up to v26.08 was discovered to contain a reflected cross-site scripting XSS vulnerability via the ficheiro parameter...

AIRC MyNET 安全漏洞

AIRC MyNET is a specialized online management system from AIRC Portugal. A security vulnerability exists in AIRC MyNET v26.08 and earlier versions, which stems from improper handling of the ficheiro parameter and could lead to a reflective cross-site scripting attack...