CVE-2024-40317

Summary

A reflected cross-site scripting (XSS) vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the parameter HTTP.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://www.airc.pt/solucoes-servicos/solucoes?segment=MYN
• https://miguelsantareno.github.io/airc_exploit.txt

• ←Previous
• Next→