CVE-2025-7867 Portabilis i-Educar Agenda agenda.php cross site scripting

A vulnerability has been found in Portabilis i-Educar 2.9.0/2.10.0. This vulnerability affects unknown code of the file /intranet/agenda.php of the component Agenda Module. The manipulation of the argument novotitulo/novodescricao leads to cross site scripting. It is possible to initiate the atta...

CVE-2025-7867 Portabilis i-Educar Agenda agenda.php cross site scripting

A vulnerability has been found in Portabilis i-Educar 2.9.0/2.10.0. This vulnerability affects unknown code of the file /intranet/agenda.php of the component Agenda Module. The manipulation of the argument novotitulo/novodescricao leads to cross site scripting. It is possible to initiate the atta...

CVE-2025-7867

A vulnerability has been found in Portabilis i-Educar 2.9.0/2.10.0. This vulnerability affects unknown code of the file /intranet/agenda.php of the component Agenda Module. The manipulation of the argument novotitulo/novodescricao leads to cross site scripting. It is possible to initiate the atta...

CVE-2025-7867 Portabilis i-Educar Agenda agenda.php cross site scripting

A vulnerability has been found in Portabilis i-Educar 2.9.0/2.10.0. This vulnerability affects unknown code of the file /intranet/agenda.php of the component Agenda Module. The manipulation of the argument novotitulo/novodescricao leads to cross site scripting. It is possible to initiate the atta...

CVE-2025-7867

CVE-2025-7867 affects Portabilis i-Educar 2.9.0/2.10.0, specifically the Agenda Module’s file /intranet/agenda.php. The vulnerability arises from manipulating the parameters novo_titulo and novo_descricao, leading to cross-site scripting. Attacks can be initiated remotely, and the exploit has bee...

CVE-2025-7866

Portabilis i-Educar 2.9.0 is affected. The Vulnerability lies in the Disabilities Module via the file /intranet/educar_deficiencia_lst.php, where the Deficiência ou Transtorno parameter can be manipulated to trigger cross-site scripting. The issue can be exploited remotely and the exploit has bee...

CVE-2025-7866 Portabilis i-Educar Disabilities Module educar_deficiencia_lst.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9.0. It has been rated as problematic. This issue affects some unknown processing of the file /intranet/educardeficiencialst.php of the component Disabilities Module. The manipulation of the argument Deficiência ou Transtorno leads to cross site...

CVE-2025-7866 Portabilis i-Educar Disabilities Module educar_deficiencia_lst.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9.0. It has been rated as problematic. This issue affects some unknown processing of the file /intranet/educardeficiencialst.php of the component Disabilities Module. The manipulation of the argument Deficiência ou Transtorno leads to cross site...

CVE-2025-7866 Portabilis i-Educar Disabilities Module educar_deficiencia_lst.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9.0. It has been rated as problematic. This issue affects some unknown processing of the file /intranet/educardeficiencialst.php of the component Disabilities Module. The manipulation of the argument Deficiência ou Transtorno leads to cross site...

PT-2025-30173 · Portabilis · Portabilis I-Diario

Name of the Vulnerable Software and Affected Versions: Portabilis i-Diario version 1.5.0 Description: A vulnerability exists in Portabilis i-Diario that allows for cross site scripting. The issue affects unknown code within the /conteudos file. The filterby description argument can be manipulated...

PT-2025-30174 · Portabilis · I-Diario

Name of the Vulnerable Software and Affected Versions: Portabilis i-Diario version 1.5.0 Description: A problematic issue exists due to the manipulation of the Justificativa argument, leading to cross site scripting. The issue affects unknown processing of the file /justificativas-de-falta. The...

Portabilisu202fi‑Diário 代码注入漏洞

Portabilisu202fi-Diário is an open source school calendar and teacher interaction management system from Portabilis, Brazil. A code injection vulnerability exists in Portabilisu202fi-Diário version 1.5.0, which originates from cross-site scripting due to improper handling of the parameter...

Portábilis i-Educar 代码注入漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portabilis i-Educar version 2.9.0, which originates from cross-site scripting due to improper handling of the parameter Deficiência ou...

PT-2025-30169

Name of the Vulnerable Software and Affected Versions Portabilis i-Educar version 2.9.0 Description A problematic issue exists in the Agenda Module of Portabilis i-Educar 2.9.0. The issue is due to cross site scripting resulting from manipulation of the novo titulo argument in the...

PT-2025-30170

Name of the Vulnerable Software and Affected Versions Portabilis i-Educar version 2.9.0 Description A cross-site scripting issue exists due to the manipulation of the Motivo argument within the Calendar Module. The vulnerability is located in the /intranet/educar calendario dia motivo cad.php fil...

CVE-2025-7872: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Portabilis i-Diario 1.5.0 and classified as problematic. This issue affects some unknown processing of the file /justificativas-de-falta. The manipulation of the argument Justificativa leads to cross site scripting. The attack may be initiated remotely. The exploit ha...

CVE-2025-7871: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Portabilis i-Diario 1.5.0 and classified as problematic. This vulnerability affects unknown code of the file /conteudos. The manipulation of the argument filterbydescription leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

CVE-2025-7870: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in Portabilis i-Diario 1.5.0. This affects an unknown part of the component justificativas-de-falta Endpoint. The manipulation of the argument Anexo leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2025-7869: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0. Affected by this issue is some unknown functionality of the file intranet/educarturmatipodet.php?codturmatipo=ID of the component Turma Module. The manipulation of the argument nmtipo leads to cross...

CVE-2025-7867: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Portabilis i-Educar 2.9.0/2.10.0. This vulnerability affects unknown code of the file /intranet/agenda.php of the component Agenda Module. The manipulation of the argument novotitulo/novodescricao leads to cross site scripting. It is possible to initiate the atta...