CVE-2025-7869 Portabilis i-Educar Turma Module educar_turma_tipo_det.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0. Affected by this issue is some unknown functionality of the file intranet/educarturmatipodet.php?codturmatipo=ID of the component Turma Module. The manipulation of the argument nmtipo leads to cross...

CVE-2025-7869

Portabilis i-Educar 2.9.0 is affected. The vulnerability is a cross-site scripting flaw in the Turma Module caused by unsanitized handling of the nm_tipo parameter in intranet/educar_turma_tipo_det.php?cod_turma_tipo=ID. The issue can be exploited remotely and has been publicly disclosed; exploit...

CVE-2025-7869 Portabilis i-Educar Turma Module educar_turma_tipo_det.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0. Affected by this issue is some unknown functionality of the file intranet/educarturmatipodet.php?codturmatipo=ID of the component Turma Module. The manipulation of the argument nmtipo leads to cross...

CVE-2025-7869 Portabilis i-Educar Turma Module educar_turma_tipo_det.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0. Affected by this issue is some unknown functionality of the file intranet/educarturmatipodet.php?codturmatipo=ID of the component Turma Module. The manipulation of the argument nmtipo leads to cross...

CVE-2025-7868 Portabilis i-Educar Calendar educar_calendario_dia_motivo_cad.php cross site scripting

A vulnerability was found in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /intranet/educarcalendariodiamotivocad.php of the component Calendar Module. The manipulation of the argument Motivo/descricao results in cross site scripting. It is possible to...

CVE-2025-7868

Portabilis i-Educar Calendar module vulnerability (CVE-2025-7868) allows remote cross-site scripting via the Motivo/descricao argument in /intranet/educar_calendario_dia_motivo_cad.php. Affected versions range up to 2.10; one source specifies version 2.9.0. The exploit is publicly disclosed. Root...

CVE-2025-7868 Portabilis i-Educar Calendar educar_calendario_dia_motivo_cad.php cross site scripting

A vulnerability was found in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /intranet/educarcalendariodiamotivocad.php of the component Calendar Module. The manipulation of the argument Motivo/descricao results in cross site scripting. It is possible to...

CVE-2025-7868 Portabilis i-Educar Calendar educar_calendario_dia_motivo_cad.php cross site scripting

A vulnerability was found in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /intranet/educarcalendariodiamotivocad.php of the component Calendar Module. The manipulation of the argument Motivo/descricao results in cross site scripting. It is possible to...

CVE-2025-7866

A vulnerability was found in Portabilis i-Educar 2.9.0. It has been rated as problematic. This issue affects some unknown processing of the file /intranet/educardeficiencialst.php of the component Disabilities Module. The manipulation of the argument Deficiência ou Transtorno leads to cross site...

CVE-2025-7867 Portabilis i-Educar Agenda agenda.php cross site scripting

A vulnerability has been found in Portabilis i-Educar 2.9.0/2.10.0. This vulnerability affects unknown code of the file /intranet/agenda.php of the component Agenda Module. The manipulation of the argument novotitulo/novodescricao leads to cross site scripting. It is possible to initiate the atta...

CVE-2025-7867

CVE-2025-7867 affects Portabilis i-Educar 2.9.0/2.10.0, specifically the Agenda Module’s file /intranet/agenda.php. The vulnerability arises from manipulating the parameters novo_titulo and novo_descricao, leading to cross-site scripting. Attacks can be initiated remotely, and the exploit has bee...

CVE-2025-7867 Portabilis i-Educar Agenda agenda.php cross site scripting

A vulnerability has been found in Portabilis i-Educar 2.9.0/2.10.0. This vulnerability affects unknown code of the file /intranet/agenda.php of the component Agenda Module. The manipulation of the argument novotitulo/novodescricao leads to cross site scripting. It is possible to initiate the atta...

CVE-2025-7867 Portabilis i-Educar Agenda agenda.php cross site scripting

A vulnerability has been found in Portabilis i-Educar 2.9.0/2.10.0. This vulnerability affects unknown code of the file /intranet/agenda.php of the component Agenda Module. The manipulation of the argument novotitulo/novodescricao leads to cross site scripting. It is possible to initiate the atta...

CVE-2025-7866 Portabilis i-Educar Disabilities Module educar_deficiencia_lst.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9.0. It has been rated as problematic. This issue affects some unknown processing of the file /intranet/educardeficiencialst.php of the component Disabilities Module. The manipulation of the argument Deficiência ou Transtorno leads to cross site...

CVE-2025-7866

Portabilis i-Educar 2.9.0 is affected. The Vulnerability lies in the Disabilities Module via the file /intranet/educar_deficiencia_lst.php, where the Deficiência ou Transtorno parameter can be manipulated to trigger cross-site scripting. The issue can be exploited remotely and the exploit has bee...

CVE-2025-7866 Portabilis i-Educar Disabilities Module educar_deficiencia_lst.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9.0. It has been rated as problematic. This issue affects some unknown processing of the file /intranet/educardeficiencialst.php of the component Disabilities Module. The manipulation of the argument Deficiência ou Transtorno leads to cross site...

CVE-2025-7866 Portabilis i-Educar Disabilities Module educar_deficiencia_lst.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9.0. It has been rated as problematic. This issue affects some unknown processing of the file /intranet/educardeficiencialst.php of the component Disabilities Module. The manipulation of the argument Deficiência ou Transtorno leads to cross site...

Portábilis i-Educar 代码注入漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portabilis i-Educar version 2.9.0, which originates from cross-site scripting due to improper handling of the parameter Deficiência ou...

PT-2025-30171 · Portabilis · I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.9.0 Description: A cross-site scripting issue exists due to the manipulation of the nm tipo argument in the file intranet/educar turma tipo det.php?cod turma tipo=ID of the Turma Module. The attack can be launche...

Portabilisu202fi‑Diário 代码注入漏洞

Portabilisu202fi-Diário is an open source school calendar and teacher interaction management system from Portabilis, Brazil. A code injection vulnerability exists in Portabilisu202fi-Diário version 1.5.0, which originates from cross-site scripting due to improper handling of the parameter...