CVE-2025-7113

Portabilis i-Educar 2.9.0 is affected. The vulnerability resides in the Curricular Components Module, specifically the /module/ComponenteCurricular/edit endpoint where manipulating the Nome parameter enables a cross-site scripting (XSS) flaw. It can be triggered remotely, with public exploit disc...

CVE-2025-7112 Portabilis i-Educar Function Management Module educar_funcao_det.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown processing of the file /intranet/educarfuncaodet.php?codfuncao=COD&refcodinstituicao=COD of the component Function Management Module. The manipulation of the argument Função leads...

CVE-2025-7112

Portabilis i-Educar 2.9.0, Function Management Module, has a cross-site scripting (XSS) vulnerability in the educar_funcao_det.php endpoint caused by unsafely manipulating the Função parameter (cod_funcao/ref_cod_instituicao). The issue can be triggered remotely and is publicly disclosed. Multipl...

CVE-2025-7112 Portabilis i-Educar Function Management Module educar_funcao_det.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown processing of the file /intranet/educarfuncaodet.php?codfuncao=COD&refcodinstituicao=COD of the component Function Management Module. The manipulation of the argument Função leads...

CVE-2025-7112 Portabilis i-Educar Function Management Module educar_funcao_det.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown processing of the file /intranet/educarfuncaodet.php?codfuncao=COD&refcodinstituicao=COD of the component Function Management Module. The manipulation of the argument Função leads...

CVE-2025-7110

A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9.0. This affects an unknown part of the file /intranet/educarescolalst.php of the component School Module. The manipulation of the argument Escola leads to cross site scripting. It is possible to initiate th...

CVE-2025-7111 Portabilis i-Educar Course Module educar_curso_det.php cross site scripting

A vulnerability has been found in Portabilis i-Educar 2.9.0 and classified as problematic. This vulnerability affects unknown code of the file /intranet/educarcursodet.php?codcurso=ID of the component Course Module. The manipulation of the argument Curso leads to cross site scripting. The attack...

CVE-2025-7111 Portabilis i-Educar Course Module educar_curso_det.php cross site scripting

A vulnerability has been found in Portabilis i-Educar 2.9.0 and classified as problematic. This vulnerability affects unknown code of the file /intranet/educarcursodet.php?codcurso=ID of the component Course Module. The manipulation of the argument Curso leads to cross site scripting. The attack...

CVE-2025-7111

Portabilis i-Educar 2.9.0 is affected in the Course Module, specifically file /intranet/educar_curso_det.php?cod_curso=ID. The vulnerability arises from unsafely handling the Curso parameter, enabling cross-site scripting (XSS). Attacks are possible remotely, and public exploits have been disclos...

CVE-2025-7111 Portabilis i-Educar Course Module educar_curso_det.php cross site scripting

A vulnerability has been found in Portabilis i-Educar 2.9.0 and classified as problematic. This vulnerability affects unknown code of the file /intranet/educarcursodet.php?codcurso=ID of the component Course Module. The manipulation of the argument Curso leads to cross site scripting. The attack...

CVE-2025-7110 Portabilis i-Educar School Module educar_escola_lst.php cross site scripting

A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9.0. This affects an unknown part of the file /intranet/educarescolalst.php of the component School Module. The manipulation of the argument Escola leads to cross site scripting. It is possible to initiate th...

CVE-2025-7110 Portabilis i-Educar School Module educar_escola_lst.php cross site scripting

A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9.0. This affects an unknown part of the file /intranet/educarescolalst.php of the component School Module. The manipulation of the argument Escola leads to cross site scripting. It is possible to initiate th...

CVE-2025-7110 Portabilis i-Educar School Module educar_escola_lst.php cross site scripting

A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9.0. This affects an unknown part of the file /intranet/educarescolalst.php of the component School Module. The manipulation of the argument Escola leads to cross site scripting. It is possible to initiate th...

CVE-2025-7110

CVE-2025-7110 affects Portabilis i-Educar 2.9.0, specifically the School Module’s /intranet/educar_escola_lst.php. The vulnerability arises from manipulating the Escola parameter, enabling cross-site scripting. Exploitation can be remote, and public disclosure has occurred; vendor reportedly did ...

CVE-2025-7109

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0. Affected by this issue is some unknown functionality of the file /intranet/educaralunobeneficiolst.php of the component Student Benefits Registration. The manipulation of the argument Benefício lead...

CVE-2025-7109

Portabilis i-Educar 2.9.0 contains a cross-site scripting vulnerability in the Student Benefits Registration component, specifically in the file /intranet/educar_aluno_beneficio_lst.php where manipulation of the Benefício parameter leads to XSS. The issue is exploitable remotely and public exploi...

CVE-2025-7109 Portabilis i-Educar Student Benefits Registration educar_aluno_beneficio_lst.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0. Affected by this issue is some unknown functionality of the file /intranet/educaralunobeneficiolst.php of the component Student Benefits Registration. The manipulation of the argument Benefício lead...

CVE-2025-7109 Portabilis i-Educar Student Benefits Registration educar_aluno_beneficio_lst.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0. Affected by this issue is some unknown functionality of the file /intranet/educaralunobeneficiolst.php of the component Student Benefits Registration. The manipulation of the argument Benefício lead...

CVE-2025-7109 Portabilis i-Educar Student Benefits Registration educar_aluno_beneficio_lst.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0. Affected by this issue is some unknown functionality of the file /intranet/educaralunobeneficiolst.php of the component Student Benefits Registration. The manipulation of the argument Benefício lead...

PT-2025-28126 · Portabilis · Portabilis I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.9.0 Description: A vulnerability was found in the Function Management Module, affecting the processing of the file /intranet/educar funcao det.php?cod funcao=COD&ref cod instituicao=COD. The manipulation of the...