CVE-2025-8789 Portabilis i-Educar API Endpoint Diario authorization

A vulnerability was found in Portabilis i-Educar up to 2.9.0. It has been classified as problematic. This affects an unknown part of the file /module/Api/Diario of the component API Endpoint. The manipulation leads to authorization bypass. It is possible to initiate the attack remotely. The explo...

CVE-2025-8788 Portabilis i-Diario Informações adicionais planos-de-aula-por-areas-de-conhecimento cross site scripting

A vulnerability was found in Portabilis i-Diario up to 1.5.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /planos-de-aula-por-areas-de-conhecimento/ of the component Informações adicionais. The manipulation of the argument...

CVE-2025-8788 Portabilis i-Diario Informações adicionais planos-de-aula-por-areas-de-conhecimento cross site scripting

A vulnerability was found in Portabilis i-Diario up to 1.5.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /planos-de-aula-por-areas-de-conhecimento/ of the component Informações adicionais. The manipulation of the argument...

CVE-2025-8788 Portabilis i-Diario Informações adicionais planos-de-aula-por-areas-de-conhecimento cross site scripting

A vulnerability was found in Portabilis i-Diario up to 1.5.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /planos-de-aula-por-areas-de-conhecimento/ of the component Informações adicionais. The manipulation of the argument...

CVE-2025-8788

Portabilis i-Diario (≤ 1.5.0) is affected by a cross-site scripting flaw in the file /planos-de-aula-por-areas-de-conhecimento/ within the Informações adicionais component. The vulnerability arises from unsafely handling the Parecer/Conteúdos/Objetivos parameter, enabling remote exploitation afte...

CVE-2025-8787 Portabilis i-Diario Registro das atividades registros-de-conteudos-por-disciplina cross site scripting

A vulnerability has been found in Portabilis i-Diario up to 1.5.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /registros-de-conteudos-por-disciplina/ of the component Registro das atividades. The manipulation of the argument Registro de...

CVE-2025-8787 Portabilis i-Diario Registro das atividades registros-de-conteudos-por-disciplina cross site scripting

A vulnerability has been found in Portabilis i-Diario up to 1.5.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /registros-de-conteudos-por-disciplina/ of the component Registro das atividades. The manipulation of the argument Registro de...

CVE-2025-8787 Portabilis i-Diario Registro das atividades registros-de-conteudos-por-disciplina cross site scripting

A vulnerability has been found in Portabilis i-Diario up to 1.5.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /registros-de-conteudos-por-disciplina/ of the component Registro das atividades. The manipulation of the argument Registro de...

CVE-2025-8787

Portabilis i-Diario up to 1.5.0 is affected by a Cross‑Site Scripting vulnerability in the Registro das atividades component. The issue stems from manipulating the argument Registro de atividades/Conteúdos in the file /registros-de-conteudos-por-disciplina/, which can be exploited remotely. The e...

CVE-2025-8786 Portabilis i-Diario Registro das atividades registros-de-conteudos-por-areas-de-conhecimento cross site scripting

A vulnerability, which was classified as problematic, was found in Portabilis i-Diario up to 1.5.0. Affected is an unknown function of the file /registros-de-conteudos-por-areas-de-conhecimento/ of the component Registro das atividades. The manipulation of the argument Registro de...

CVE-2025-8786

CVE-2025-8786 affects Portabilis i-Diario up to 1.5.0, specifically the Registro das atividades component and the file path /registros-de-conteudos-por-areas-de-conhecimento/. The vulnerability arises from manipulation of the Registro de atividades/Conteúdos argument in that file, leading to cros...

CVE-2025-8786 Portabilis i-Diario Registro das atividades registros-de-conteudos-por-areas-de-conhecimento cross site scripting

A vulnerability, which was classified as problematic, was found in Portabilis i-Diario up to 1.5.0. Affected is an unknown function of the file /registros-de-conteudos-por-areas-de-conhecimento/ of the component Registro das atividades. The manipulation of the argument Registro de...

CVE-2025-8786 Portabilis i-Diario Registro das atividades registros-de-conteudos-por-areas-de-conhecimento cross site scripting

A vulnerability, which was classified as problematic, was found in Portabilis i-Diario up to 1.5.0. Affected is an unknown function of the file /registros-de-conteudos-por-areas-de-conhecimento/ of the component Registro das atividades. The manipulation of the argument Registro de...

CVE-2025-8785

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar up to 2.9. This issue affects some unknown processing of the file /intranet/educarusuariolst.php. The manipulation of the argument nmpessoa/matricula/matriculainterna leads to cross site scripting. The...

Portabilis i‑Diário 代码注入漏洞

Portabilis i-Diário is an open source school calendar and teacher interaction management system from Portabilis, Brazil. A code injection vulnerability exists in Portabilis i-Diário 1.5.0 and earlier versions, which originates in the file /planos-de-aula-por-areas-de-conhecimento/ in the paramete...

PT-2025-32460 · Portabilis · Portabilis I-Diario

Name of the Vulnerable Software and Affected Versions: Portabilis i-Diario versions up to 1.5.0 Description: A cross-site scripting issue exists in Portabilis i-Diario. The issue affects an unknown functionality of the /registros-de-conteudos-por-disciplina/ file within the Registro das atividade...

PT-2025-32462 · Unknown · Portabilis I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.9.0 Description: A vulnerability exists in Portabilis i-Educar that allows for authorization bypass. The issue affects an unknown part of the file /module/Api/Diario within the API Endpoint component and c...

PT-2025-32459 · Portabilis · I-Diario

Name of the Vulnerable Software and Affected Versions: Portabilis i-Diario versions up to 1.5.0 Description: A cross-site scripting issue exists due to the manipulation of the Registro de atividades/Conteúdos argument. The issue affects an unknown function of the...

PT-2025-32461 · Portabilis · Portabilis I-Diario

Name of the Vulnerable Software and Affected Versions: Portabilis i-Diario versions up to 1.5.0 Description: A cross site scripting issue exists in the file /planos-de-aula-por-areas-de-conhecimento/ of the component Informações adicionais. The manipulation of the Parecer/Conteúdos/Objetivos...

Portabilis i‑Diário 代码注入漏洞

Portabilis i-Diário is an open source school calendar and teacher interaction management system from Portabilis, Brazil. A code injection vulnerability exists in Portabilis i-Diário 1.5.0 and earlier versions, which stems from the parameter Registro de atividades/Conteúdos in file...