CVE-2025-10590: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in Portabilis i-Educar up to 2.10. The impacted element is an unknown function of the file /intranet/educarusuariodet.php. The manipulation of the argument refpessoa results in cross site scripting. The attack can be executed remotely. The exploit has been...

CVE-2025-10591: Improper Neutralization of Input During Web Page Generation

A weakness has been identified in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet/educarfuncaocad.php of the component Editar Função Page. This manipulation of the argument abreviatura/tipoacao causes cross site scripting. The attack is possible to be carrie...

i-Educar 代码注入漏洞

i-Educar is a free educational software from Portábilis Open Source. A code injection vulnerability exists in i-Educar 2.10 and earlier versions, which stems from a misuse of the parameter nmanotacao/descricao in the file /intranet/educarcalendarioanotacaocad.php, which could lead to a cross-site...

i-Educar 访问控制错误漏洞

i-Educar is a free educational software from Portábilis Open Source. An access control error vulnerability exists in i-Educar version 2.10 and earlier, which stems from improper access control of unknown functions in the file /enrollment-history/, which could lead to a remote attack...

i-Educar 代码注入漏洞

i-Educar is a free educational software from Portábilis Open Source. A code injection vulnerability exists in i-Educar 2.10 and earlier versions, which stems from misuse of the parameter tipoacao in the file /module/Configuracao/ConfiguracaoMovimentoGeral, and could lead to a cross-site scripting...

i-Educar 安全漏洞

i-Educar is a free educational software from Portábilis Open Source. A security vulnerability exists in i-Educar version 2.10 and earlier, which stems from the incorrect manipulation of the parameter tipoacao in the file /agendapreferencias.php, which could lead to a cross-site scripting attack...

i-Educar 代码注入漏洞

i-Educar is a free educational software open source by Portábilis. A code injection vulnerability exists in i-Educar 2.10 and earlier versions, which stems from a misbehavior of the parameter abreviatura/tipoacao in the file /intranet/educarfuncaocad.php, which could lead to a cross-site scriptin...

PT-2025-38240

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.10 Description: A security flaw has been discovered in Portabilis i-Educar. The vulnerability affects unknown code within the /agenda preferencias.php file. Manipulation of the tipoacao argument can lead t...

PT-2025-38140

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.10 Description: A weakness exists in Portabilis i-Educar up to version 2.10. The issue is related to the manipulation of the abreviatura/tipoacao argument in the /intranet/educar funcao cad.php file within...

i-Educar 访问控制错误漏洞

i-Educar is a free educational software from Portábilis Open Source. An access control error vulnerability exists in i-Educar version 2.10 and earlier, which stems from improper manipulation of unknown functions in the file /module/Avaliacao/diarioApi, which could lead to information disclosure...

CVE-2025-10606: Improper Neutralization of Input During Web Page Generation

A weakness has been identified in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /module/Configuracao/ConfiguracaoMovimentoGeral. This manipulation of the argument tipoacao causes cross site scripting. Remote exploitation of the attack is possible. The...

CVE-2025-10584: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /intranet/educarcalendarioanotacaocad.php. Such manipulation of the argument nmanotacao/descricao leads to cross site scripting. It is possible to launch the attack remotely. The exploit ...

PT-2025-38249

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.10 Description: A vulnerability exists in Portabilis i-Educar up to version 2.10. The issue involves improper access controls due to manipulation of an unknown function within the /enrollment-history/ file...

CVE-2025-10608: Improper Access Control

A vulnerability was detected in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /enrollment-history/. Performing manipulation results in improper access controls. The attack is possible to be carried out remotely. The exploit is now public and may be used...

CVE-2025-10605: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /agendapreferencias.php. The manipulation of the argument tipoacao results in cross site scripting. The attack may be launched remotely. The exploit has been released to the...

PT-2025-38244

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.10 Description: A weakness has been identified in Portabilis i-Educar that allows for cross site scripting. The issue affects unknown processing of the file /module/Configuracao/ConfiguracaoMovimentoGeral...

PT-2025-38245

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions prior to 2.11 Description: A security issue has been identified in Portabilis i-Educar. The vulnerability involves an unknown function within the /module/Avaliacao/diarioApi file, leading to information disclosure...

i-Educar 代码注入漏洞

i-Educar is a free educational software open source by Portábilis. A code injection vulnerability exists in i-Educar version 2.10 and earlier, which stems from a misuse of the parameter refpessoa in the file /intranet/educarusuariodet.php, which could lead to a cross-site scripting attack...

PT-2025-38139

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.10 Description: A security flaw exists in Portabilis i-Educar up to version 2.10. The flaw is related to cross site scripting, triggered by manipulating the ref pessoa argument of an unknown function withi...

CVE-2025-10373

A security vulnerability has been detected in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /intranet/educarturmatipocad.php. Such manipulation of the argument nmtipo leads to cross site scripting. It is possible to launch the attack remotely. The exploit...