Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2026/02/07 1:12 p.m.4 views

CVE-2026-2015

A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file FinalStatusImportService.php of the component Final Status Import. Executing a manipulation of the argument schoolid can lead to improper authorization. The attack can be executed remotel...

8.8CVSS6.1AI score0.00048EPSS
Exploits1References1
OSV
OSV
added 2026/02/06 11:15 a.m.1 views

CVE-2026-2015

A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file FinalStatusImportService.php of the component Final Status Import. Executing a manipulation of the argument schoolid can lead to improper authorization. The attack can be executed remotel...

8.8CVSS5.2AI score
Exploits0References5
NVD
NVD
added 2026/02/06 11:15 a.m.2 views

CVE-2026-2015

A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file FinalStatusImportService.php of the component Final Status Import. Executing a manipulation of the argument schoolid can lead to improper authorization. The attack can be executed remotel...

8.8CVSS0.00048EPSS
Exploits1References5
CVE
CVE
added 2026/02/06 10:32 a.m.5 views

CVE-2026-2015

CVE-2026-2015 affects Portabilis i-Educar up to version 2.10, in the Final Status Import component. The issue is an improper authorization vulnerability exploitable by manipulating the school_id argument inside FinalStatusImportService.php, with remote execution implied. Public PoC/exploit is ava...

8.8CVSS6.2AI score0.00048EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/06 10:32 a.m.2 views

CVE-2026-2015 Portabilis i-Educar Final Status Import FinalStatusImportService.php improper authorization

A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file FinalStatusImportService.php of the component Final Status Import. Executing a manipulation of the argument schoolid can lead to improper authorization. The attack can be executed remotel...

6.5CVSS5.1AI score0.00048EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/02/06 10:32 a.m.25 views

CVE-2026-2015 Portabilis i-Educar Final Status Import FinalStatusImportService.php improper authorization

A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file FinalStatusImportService.php of the component Final Status Import. Executing a manipulation of the argument schoolid can lead to improper authorization. The attack can be executed remotel...

6.5CVSS0.00048EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/02/06 12:0 a.m.2 views

Portábilis i-Educar 授权问题漏洞

Portábilis i-Educar is an application developed by Portábilis Corporation. It can conveniently assist you with basic education and technical training. Versions of Portábilis i-Educar 2.10 and earlier contained a licensing vulnerability. This vulnerability stemmed from incorrect handling of the...

8.8CVSS6.5AI score0.00048EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/02/06 12:0 a.m.2 views

PT-2026-6716

Name of the Vulnerable Software and Affected Versions Portabilis i-Educar versions up to 2.10 Description A weakness exists in Portabilis i-Educar up to version 2.10, specifically within the Final Status Import component. The issue involves improper authorization that can be triggered by...

6.5CVSS5.2AI score0.00048EPSS
Exploits1References10
Rows per page
Query Builder