CNNVD-202512-4308 Information

CNNVD ID

CNNVD-202512-4308

CVE-2024-40317

  • CNNVD Published: 2025-12-24

Description (Chinese)

AIRC MyNET是葡萄牙AIRC公司的一个专用在线管理系统。 AIRC MyNET v26.08及之前版本存在安全漏洞,该漏洞源于HTTP参数处理不当,可能导致反射型跨站脚本攻击。

Description (English)

AIRC MyNET is a dedicated online management system for AIRC in Portugal. There is a security gap in AIRC MyNET v26.08 and earlier versions, which stems from the inappropriate handling of HTTP parameters, which may lead to a cross-station attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

AIRC

Published

2025-12-24

Last Modified

2026-02-24

References

https://miguelsantareno.github.io/airc_exploit.txt https://www.airc.pt/solucoes-servicos/solucoes?segment=MYN https://access.redhat.com/security/cve/cve-2024-40317

Share on: