Vulnerabilities

TI-2024-26887 CVE-2024-40317 · GHSA-gc5g-jhc5-xh8h

A reflected cross-site scripting (XSS) vulnerability in MyNET up to v26.08 allows…

MEDIUM 60

A reflected cross-site scripting (XSS) vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter HTTP.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00266 Published 2025-12-24 No fix listed CWE-79

TI-2024-26166 CVE-2024-39037 · GHSA-x5xq-cwhv-jgjh

MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection…

HIGH 68

MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerability via the intmenu parameter.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00239 Published 2025-12-24 No fix listed CWE-89

TI-2024-23374 CVE-2024-35322 · GHSA-m9g9-rxjq-3p3h

MyNET up to v26.08 was discovered to contain a reflected cross-site scripting (XSS)…

MEDIUM 60

MyNET up to v26.08 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the ficheiro parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00225 Published 2025-12-24 No fix listed CWE-79

TI-2024-23373 CVE-2024-35321 · GHSA-j43r-jrvp-8qxx

MyNET up to v26.08 was discovered to contain a Reflected cross-site scripting (XSS)…

MEDIUM 53

MyNET up to v26.08 was discovered to contain a Reflected cross-site scripting (XSS) vulnerability via the msgtipo parameter.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00306 Published 2025-12-22 No fix listed CWE-79

TI-2024-18357 CVE-2024-27708 · GHSA-8xhw-9c42-qrph

Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and…

MEDIUM 44

Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src parameter.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00614 Published 2025-12-22 No fix listed CWE-74

TI-2024-16956 CVE-2024-25814 · GHSA-m97c-36mv-5r2x

MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the msg parameter.

MEDIUM 60

MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the msg parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00225 Published 2025-12-22 No fix listed CWE-79

TI-2024-16955 CVE-2024-25812 · GHSA-vg9x-jpx8-jx82

MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the src parameter.

MEDIUM 60

MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the src parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00225 Published 2025-12-22 No fix listed CWE-79

Vulnerabilities

Filters

A reflected cross-site scripting (XSS) vulnerability in MyNET up to v26.08 allows…

MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection…

MyNET up to v26.08 was discovered to contain a reflected cross-site scripting (XSS)…

MyNET up to v26.08 was discovered to contain a Reflected cross-site scripting (XSS)…

Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and…

MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the msg parameter.

MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the src parameter.