CVE-2024-39037
Unknown
Unknown - Not Provided
Unauthenticated SQL Injection in MyNET v26.08.316 via intmenu Parameter
Publication date: 2025-12-24
Last updated on: 2025-12-24
Assigner: MITRE
Description
Description
MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerability via the intmenu parameter.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| mynet | mynet | * |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an Unauthenticated SQL Injection in MyNET up to version 26.08.316, which occurs via the intmenu parameter. It allows an attacker to inject malicious SQL code without needing to authenticate.
How can this vulnerability impact me? :
The vulnerability can allow attackers to execute arbitrary SQL commands on the database, potentially leading to unauthorized data access, data modification, or data deletion, compromising the security and integrity of the system.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70