CVE-2025-7110

CVE-2025-7110 affects Portabilis i-Educar 2.9.0, specifically the School Module’s /intranet/educar_escola_lst.php. The vulnerability arises from manipulating the Escola parameter, enabling cross-site scripting. Exploitation can be remote, and public disclosure has occurred; vendor reportedly did ...

CVE-2025-7110 Portabilis i-Educar School Module educar_escola_lst.php cross site scripting

A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9.0. This affects an unknown part of the file /intranet/educarescolalst.php of the component School Module. The manipulation of the argument Escola leads to cross site scripting. It is possible to initiate th...

CVE-2025-7109

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0. Affected by this issue is some unknown functionality of the file /intranet/educaralunobeneficiolst.php of the component Student Benefits Registration. The manipulation of the argument Benefício lead...

CVE-2025-7109

Portabilis i-Educar 2.9.0 contains a cross-site scripting vulnerability in the Student Benefits Registration component, specifically in the file /intranet/educar_aluno_beneficio_lst.php where manipulation of the Benefício parameter leads to XSS. The issue is exploitable remotely and public exploi...

CVE-2025-7109

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0. Affected by this issue is some unknown functionality of the file /intranet/educaralunobeneficiolst.php of the component Student Benefits Registration. The manipulation of the argument Benefício lead...

CVE-2025-7109 Portabilis i-Educar Student Benefits Registration educar_aluno_beneficio_lst.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0. Affected by this issue is some unknown functionality of the file /intranet/educaralunobeneficiolst.php of the component Student Benefits Registration. The manipulation of the argument Benefício lead...

CVE-2025-7109 Portabilis i-Educar Student Benefits Registration educar_aluno_beneficio_lst.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0. Affected by this issue is some unknown functionality of the file /intranet/educaralunobeneficiolst.php of the component Student Benefits Registration. The manipulation of the argument Benefício lead...

CVE-2025-7113: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Portabilis i-Educar 2.9.0. It has been classified as problematic. Affected is an unknown function of the file /module/ComponenteCurricular/edit?id=ID of the component Curricular Components Module. The manipulation of the argument Nome leads to cross site scripting. It...

PT-2025-28130 · Unknown · Portabilis I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.9.0 Description: A vulnerability was found in the Curricular Components Module of Portabilis i-Educar, affecting an unknown function of the file "/module/ComponenteCurricular/edit?id=ID". The manipulation of the...

PT-2025-28126 · Portabilis · Portabilis I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.9.0 Description: A vulnerability was found in the Function Management Module, affecting the processing of the file /intranet/educar funcao det.php?cod funcao=COD&ref cod instituicao=COD. The manipulation of the...

i-Educar code injection vulnerability

i-Educar is a free educational software from Portábilis Open Source. A code injection vulnerability exists in i-Educar version 2.9.0, which stems from improper handling of the parameter Nome in the file /module/ComponenteCurricular/edit, which could lead to a cross-site scripting attack...

Portábilis i-Educar code injection vulnerability

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portábilis i-Educar version 2.9.0, which stems from improper handling of the parameter Função in the file /intranet/educarfuncaodet.php, which...

Portábilis i-Educar code injection vulnerability

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portábilis i-Educar version 2.9.0, which stems from improper handling of the parameter Curso in the file /intranet/educarcursodet.php, which...

i-Educar code injection vulnerability

i-Educar is a free educational software from Portábilis Open Source. A code injection vulnerability exists in i-Educar version 2.9.0, which stems from improper handling of the parameter Benefício in the file /intranet/educaralunobeneficiolst.php, which could lead to a cross-site scripting attack...

i-Educar code injection vulnerability

i-Educar is a free educational software open source by Portábilis. A code injection vulnerability exists in i-Educar version 2.9.0, which stems from improper handling of the parameter Escola in the file /intranet/educarescolalst.php, which could lead to a cross-site scripting attack...

PT-2025-28125 · Portabilis · Portabilis I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.9.0 Description: A vulnerability has been found in the component Course Module, affecting the file /intranet/educar curso det.php?cod curso=ID. The manipulation of the Curso argument leads to cross-site scripting...

PT-2025-28123 · Portabilis · Portabilis I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.9.0 Description: A problematic issue has been found in the Student Benefits Registration component, specifically in the file /intranet/educar aluno beneficio lst.php. The manipulation of the Benefício argument...

PT-2025-28124 · Portabilis · Portabilis I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.9.0 Description: A problematic vulnerability was found in the School Module component, specifically affecting the /intranet/educar escola lst.php file. The manipulation of the Escola argument leads to cross-site...

CVE-2025-7111: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Portabilis i-Educar 2.9.0 and classified as problematic. This vulnerability affects unknown code of the file /intranet/educarcursodet.php?codcurso=ID of the component Course Module. The manipulation of the argument Curso leads to cross site scripting. The attack...

CVE-2025-7112: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown processing of the file /intranet/educarfuncaodet.php?codfuncao=COD&refcodinstituicao=COD of the component Function Management Module. The manipulation of the argument Função leads...