PT-2025-35354

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.10 Description: A vulnerability exists in Portabilis i-Educar up to version 2.10, specifically within the /module/AreaConhecimento/view file of the Listagem de áreas de conhecimento Page component...

PT-2025-35356

Name of the Vulnerable Software and Affected Versions Portabilis i-Educar versions prior to 2.11 Description A weakness exists in Portabilis i-Educar up to version 2.10 due to improper authorization. This issue is related to an unknown function within the /module/HistoricoEscolar/processamentoApi...

i-Educar 安全漏洞

i-Educar is a free educational software from Portábilis Open Source. A security vulnerability exists in i-Educar version 2.10 and earlier, which stems from SQL injection due to incorrect manipulation of the parameter ID in the file /module/AreaConhecimento/view...

CVE-2025-9686: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /module/AreaConhecimento/edit of the component Listagem de áreas de conhecimento Page. Performing manipulation of the argument ID results in sql injection. The attack is...

CVE-2025-9685: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /module/AreaConhecimento/view of the component Listagem de áreas de conhecimento Page. Such manipulation of the argument ID leads to sql injection. The attack can be executed...

CVE-2025-9687: Improper Authorization

A weakness has been identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /module/HistoricoEscolar/processamentoApi. Executing manipulation can lead to improper authorization. The attack may be performed from a remote location. The exploit has been made availab...

CVE-2025-9684: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/FormulaMedia/edit of the component Formula de Cálculo de Média Page. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The...

Portábilis i-Educar 安全漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you in basic and technical education. A security vulnerability exists in Portábilis i-Educar version 2.10 and earlier, which stems from improper authorization due to incorrect manipulation of parameters in the file...

Portábilis i-Educar 安全漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you in basic and technical education. A security vulnerability exists in Portábilis i-Educar version 2.10 and earlier, which stems from SQL injection due to incorrect manipulation of the parameter ID in the file...

CVE-2025-9653

A vulnerability was identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educarprojetocad.php of the component Cadastrar projeto Page. Such manipulation of the argument nome/observacao leads to cross site scripting. It is...

CVE-2025-9652

A vulnerability was determined in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file /intranet/educartransferenciatipocad.php of the component Cadastrar tipo de transferência Page. This manipulation of the argument nmtipo/desctipo causes cross site scripting. It is possib...

CVE-2025-9653 Portabilis i-Educar Cadastrar projeto educar_projeto_cad.php cross site scripting

A vulnerability was identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educarprojetocad.php of the component Cadastrar projeto Page. Such manipulation of the argument nome/observacao leads to cross site scripting. It is...

CVE-2025-9653

CVE-2025-9653 affects Portabilis i-Educar up to version 2.10. The vulnerability arises from manipulation of the nome/observacao argument in the file /intranet/educar_projeto_cad.php (Cadastrar projeto Page), enabling cross-site scripting. Exploitation can be performed remotely, and public PoCs ar...

CVE-2025-9653 Portabilis i-Educar Cadastrar projeto educar_projeto_cad.php cross site scripting

A vulnerability was identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educarprojetocad.php of the component Cadastrar projeto Page. Such manipulation of the argument nome/observacao leads to cross site scripting. It is...

CVE-2025-9653 Portabilis i-Educar Cadastrar projeto educar_projeto_cad.php cross site scripting

A vulnerability was identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educarprojetocad.php of the component Cadastrar projeto Page. Such manipulation of the argument nome/observacao leads to cross site scripting. It is...

CVE-2025-9652 Portabilis i-Educar Cadastrar tipo de transferência educar_transferencia_tipo_cad.php cross site scripting

A vulnerability was determined in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file /intranet/educartransferenciatipocad.php of the component Cadastrar tipo de transferência Page. This manipulation of the argument nmtipo/desctipo causes cross site scripting. It is possib...

CVE-2025-9652 Portabilis i-Educar Cadastrar tipo de transferência educar_transferencia_tipo_cad.php cross site scripting

A vulnerability was determined in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file /intranet/educartransferenciatipocad.php of the component Cadastrar tipo de transferência Page. This manipulation of the argument nmtipo/desctipo causes cross site scripting. It is possib...

CVE-2025-9652 Portabilis i-Educar Cadastrar tipo de transferência educar_transferencia_tipo_cad.php cross site scripting

A vulnerability was determined in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file /intranet/educartransferenciatipocad.php of the component Cadastrar tipo de transferência Page. This manipulation of the argument nmtipo/desctipo causes cross site scripting. It is possib...

CVE-2025-9609

A vulnerability was found in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /educacenso/consulta. The manipulation results in improper authorization. The attack can be executed remotely. The exploit has been made public and could be used...

CVE-2025-9609 Portabilis i-Educar consulta improper authorization

A vulnerability was found in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /educacenso/consulta. The manipulation results in improper authorization. The attack can be executed remotely. The exploit has been made public and could be used...