CVE-2025-8367 Portabilis i-Educar funcionario_vinculo_lst.php cross site scripting

A vulnerability classified as problematic has been found in Portabilis i-Educar 2.9. This affects an unknown part of the file /intranet/funcionariovinculolst.php. The manipulation of the argument nome leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-8367 Portabilis i-Educar funcionario_vinculo_lst.php cross site scripting

A vulnerability classified as problematic has been found in Portabilis i-Educar 2.9. This affects an unknown part of the file /intranet/funcionariovinculolst.php. The manipulation of the argument nome leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-8367

CVE-2025-8367 affects Portabilis i-Educar 2.9, specifically the file /intranet/funcionario_vinculo_lst.php where manipulation of the parameter nome enables cross-site scripting (XSS). The issue can be triggered remotely and the exploit has been publicly disclosed; the vendor reportedly did not re...

CVE-2025-8366 Portabilis i-Educar educar_servidor_lst.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /intranet/educarservidorlst.php. The manipulation of the argument nome/matriculaservidor leads to cross site scripting. The attack may be launch...

CVE-2025-8366 Portabilis i-Educar educar_servidor_lst.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /intranet/educarservidorlst.php. The manipulation of the argument nome/matriculaservidor leads to cross site scripting. The attack may be launch...

CVE-2025-8366 Portabilis i-Educar educar_servidor_lst.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /intranet/educarservidorlst.php. The manipulation of the argument nome/matriculaservidor leads to cross site scripting. The attack may be launch...

CVE-2025-8366

CVE-2025-8366 affects Portabilis i-Educar 2.9. The vulnerability resides in the/educar_servidor_lst.php script, where manipulation of the nome/matricula_servidor parameter enables cross-site scripting. The attack can be launched remotely, and exploits have been publicly disclosed. Multiple source...

CVE-2025-8365

A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file atendidoscad.php. The manipulation of the argument nome/nomesocial/email leads to cross site scripting. The attack can be launched...

CVE-2025-8365 Portabilis i-Educar atendidos_cad.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file atendidoscad.php. The manipulation of the argument nome/nomesocial/email leads to cross site scripting. The attack can be launched...

CVE-2025-8365 Portabilis i-Educar atendidos_cad.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file atendidoscad.php. The manipulation of the argument nome/nomesocial/email leads to cross site scripting. The attack can be launched...

CVE-2025-8365

Portabilis i-Educar 2.10 contains a cross-site scripting (XSS) vulnerability in atendidos_cad.php. Manipulation of the nome, nome_social, or email parameters can trigger XSS; the issue is remotely exploitable and the exploit has been publicly disclosed. Remediation guidance from PT-2025-31472 sug...

CVE-2025-8365 Portabilis i-Educar atendidos_cad.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file atendidoscad.php. The manipulation of the argument nome/nomesocial/email leads to cross site scripting. The attack can be launched...

CVE-2025-8346

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue is some unknown functionality of the file /educaralunolst.php. The manipulation of the argument refcodmatricula with the input " leads to cross site scripting. The attack may b...

CVE-2025-8346 Portabilis i-Educar educar_aluno_lst.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue is some unknown functionality of the file /educaralunolst.php. The manipulation of the argument refcodmatricula with the input " leads to cross site scripting. The attack may b...

CVE-2025-8346 Portabilis i-Educar educar_aluno_lst.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue is some unknown functionality of the file /educaralunolst.php. The manipulation of the argument refcodmatricula with the input " leads to cross site scripting. The attack may b...

CVE-2025-8346

Portabilis i-Educar 2.10 is affected. The vulnerability is a cross-site scripting flaw in educar_aluno_lst.php via the ref_cod_matricula parameter, exploitable remotely by injecting input like >, with user interaction required. Remediation: update to a newer Portabilis i-Educar version and san...

CVE-2025-8346 Portabilis i-Educar educar_aluno_lst.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue is some unknown functionality of the file /educaralunolst.php. The manipulation of the argument refcodmatricula with the input " leads to cross site scripting. The attack may b...

CVE-2025-8367: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Portabilis i-Educar 2.9. This affects an unknown part of the file /intranet/funcionariovinculolst.php. The manipulation of the argument nome leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-8369: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9. This issue affects some unknown processing of the file /intranet/educaravaliacaodesempenholst.php. The manipulation of the argument tituloavaliacao leads to cross site scripting. The attack may be...

PT-2025-31479 · Unknown · Portabilis I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.9 Description: A problematic vulnerability exists in Portabilis i-Educar 2.9. The issue affects unknown processing of the files /intranet/pesquisa pessoa lst.php and /intranet/educar avaliacao desempenho lst.php...