CVE-2025-8541 Portabilis i-Educar public_uf_cad.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. This vulnerability affects unknown code of the file /intranet/publicufcad.php. The manipulation of the argument nome leads to cross site scripting. The attack can be initiated remotely. The exploit has bee...

CVE-2025-8541

CVE-2025-8541 affects Portabilis i-Educar 2.10. The vulnerability is a cross-site scripting in /intranet/public_uf_cad.php triggered by manipulating the nome parameter. The attack can be initiated remotely and the exploit has been disclosed publicly; vendor response is noted as non-responsive. Th...

CVE-2025-8540 Portabilis i-Educar public_municipio_cad.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.10. It has been classified as problematic. This affects an unknown part of the file /intranet/publicmunicipiocad.php. The manipulation of the argument nome leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

CVE-2025-8540 Portabilis i-Educar public_municipio_cad.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.10. It has been classified as problematic. This affects an unknown part of the file /intranet/publicmunicipiocad.php. The manipulation of the argument nome leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

CVE-2025-8540

A vulnerability was found in Portabilis i-Educar 2.10. It has been classified as problematic. This affects an unknown part of the file /intranet/publicmunicipiocad.php. The manipulation of the argument nome leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

CVE-2025-8540 Portabilis i-Educar public_municipio_cad.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.10. It has been classified as problematic. This affects an unknown part of the file /intranet/publicmunicipiocad.php. The manipulation of the argument nome leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

CVE-2025-8540

CVE-2025-8540 affects Portabilis i-Educar 2.10. The vulnerability resides in the file /intranet/public_municipio_cad.php where the nome parameter can be manipulated to trigger a cross-site scripting (XSS) condition. The attack can be initiated remotely, and the exploit has been publicly disclosed...

CVE-2025-8539

CVE-2025-8539 affects Portabilis i-Educar 2.10. The vulnerability is a cross-site scripting issue in the file /intranet/public_distrito_cad.php caused by improper handling of the nome parameter. The impact is confined to the affected application and could allow remote execution of a script via us...

CVE-2025-8539 Portabilis i-Educar public_distrito_cad.php cross site scripting

A weakness has been identified in Portabilis i-Educar 2.10. This affects an unknown function of the file /intranet/publicdistritocad.php. This manipulation of the argument nome causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2025-8539

A weakness has been identified in Portabilis i-Educar 2.10. This affects an unknown function of the file /intranet/publicdistritocad.php. This manipulation of the argument nome causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2025-8539 Portabilis i-Educar public_distrito_cad.php cross site scripting

A weakness has been identified in Portabilis i-Educar 2.10. This affects an unknown function of the file /intranet/publicdistritocad.php. This manipulation of the argument nome causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2025-8539 Portabilis i-Educar public_distrito_cad.php cross site scripting

A weakness has been identified in Portabilis i-Educar 2.10. This affects an unknown function of the file /intranet/publicdistritocad.php. This manipulation of the argument nome causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2025-8538

A security flaw has been discovered in Portabilis i-Educar 2.10. The impacted element is an unknown function of the file /usuarios/tipos/novo. The manipulation of the argument name/description results in cross site scripting. The attack can be executed remotely. The exploit has been released to t...

CVE-2025-8538 Portabilis i-Educar novo cross site scripting

A security flaw has been discovered in Portabilis i-Educar 2.10. The impacted element is an unknown function of the file /usuarios/tipos/novo. The manipulation of the argument name/description results in cross site scripting. The attack can be executed remotely. The exploit has been released to t...

CVE-2025-8538 Portabilis i-Educar novo cross site scripting

A security flaw has been discovered in Portabilis i-Educar 2.10. The impacted element is an unknown function of the file /usuarios/tipos/novo. The manipulation of the argument name/description results in cross site scripting. The attack can be executed remotely. The exploit has been released to t...

CVE-2025-8538 Portabilis i-Educar novo cross site scripting

A security flaw has been discovered in Portabilis i-Educar 2.10. The impacted element is an unknown function of the file /usuarios/tipos/novo. The manipulation of the argument name/description results in cross site scripting. The attack can be executed remotely. The exploit has been released to t...

CVE-2025-8538

CVE-2025-8538 affects Portabilis i-Educar 2.10. The vulnerability exists in the unknown function at /usuarios/tipos/novo where manipulating the name/description parameter triggers cross-site scripting. It can be exploited remotely; the exploit has been disclosed. Vendor did not respond to disclos...

PT-2025-31898 · Portabilis · I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.10 Description: A vulnerability exists in Portabilis i-Educar 2.10 related to the processing of the /intranet/empresas cad.php file. Manipulation of the fantasia/razao social argument can lead to cross-site...

Portábilis i-Educar code injection vulnerability

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portábilis i-Educar version 2.10, which stems from improper handling of the parameter nmracacad.php in the file /intranet/educarracacad.php,...

CVE-2025-8543: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Portabilis i-Educar 2.10. Affected is an unknown function of the file /intranet/educarracacad.php. The manipulation of the argument nmraca leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...