Lucene search
+L

883 matches found

Positive Technologies
Positive Technologies
•added 2025/07/31 12:00 a.m.•17 views

PT-2025-31476 · Unknown · Portabilis I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.9 Description: A problematic vulnerability exists in Portabilis i-Educar 2.9, affecting an unknown part of the file /intranet/funcionario vinculo lst.php. Manipulation of the nome argument leads to cross-site...

6.1CVSS4.3AI score0.00386EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2025/07/31 12:00 a.m.•11 views

i-Educar 安全漏洞

i-Educar is a free educational software from Portábilis Open Source. A security vulnerability exists in i-Educar version 2.10, which stems from a cross-site scripting attack due to the incorrect operation of the parameter refcodmatricula in the file /educaralunolst.php...

6.1CVSS4.6AI score0.00386EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/31 12:00 a.m.•1 views

CVE-2025-8367: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Portabilis i-Educar 2.9. This affects an unknown part of the file /intranet/funcionariovinculolst.php. The manipulation of the argument nome leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...

6.1CVSS4AI score0.00386EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/31 12:00 a.m.•1 views

CVE-2025-8369: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9. This issue affects some unknown processing of the file /intranet/educaravaliacaodesempenholst.php. The manipulation of the argument tituloavaliacao leads to cross site scripting. The attack may be...

6.1CVSS3.9AI score0.00491EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/31 12:00 a.m.•0 views

CVE-2025-8368: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Portabilis i-Educar 2.9. This vulnerability affects unknown code of the file /intranet/pesquisapessoalst.php. The manipulation of the argument campobusca/cpf leads to cross site scripting. The attack can be initiated remotely. The exploit has...

6.1CVSS3.9AI score0.00491EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/31 12:00 a.m.•0 views

CVE-2025-8370: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9. Affected is an unknown function of the file /intranet/educarescolaridadelst.php. The manipulation of the argument descricao leads to cross site scripting. It is possible to launch the attack remotely. The...

6.1CVSS4AI score0.00491EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/31 12:00 a.m.•0 views

CVE-2025-8365: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file atendidoscad.php. The manipulation of the argument nome/nomesocial/email leads to cross site scripting. The attack can be launched...

6.1CVSS3.9AI score0.00285EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/07/31 12:00 a.m.•21 views

PT-2025-31469 · Unknown · Portabilis I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.10 Description: A cross-site scripting issue exists due to the improper handling of user-supplied input. Specifically, manipulating the ref cod matricula argument with the input " can trigger the vulnerability. T...

6.1CVSS4.6AI score0.00386EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/07/31 12:00 a.m.•10 views

Portábilis i-Educar 代码注入漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portábilis i-Educar version 2.9, which originates from a cross-site scripting attack due to the incorrect operation of parameter nome in file...

6.1CVSS5AI score0.00386EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/31 12:00 a.m.•0 views

CVE-2025-8366: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /intranet/educarservidorlst.php. The manipulation of the argument nome/matriculaservidor leads to cross site scripting. The attack may be launch...

6.1CVSS3.8AI score0.00407EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/07/31 12:00 a.m.•22 views

PT-2025-31475 · Portabilis · I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.9 Description: A problematic issue exists in Portabilis i-Educar 2.9, affecting an unknown functionality within the file /intranet/educar servidor lst.php. Manipulation of the nome/matricula servidor argument can...

6.1CVSS4.2AI score0.00407EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/07/31 12:00 a.m.•15 views

PT-2025-31480 · Unknown · Portabilis I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.9 Description: A problematic issue exists in Portabilis i-Educar 2.9. The vulnerability is located in the /intranet/educar escolaridade lst.php file. Manipulation of the descricao parameter can lead to cross-site...

6.1CVSS4.3AI score0.00491EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/07/31 12:00 a.m.•12 views

Portábilis i-Educar 代码注入漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portábilis i-Educar version 2.9, which originates from a cross-site scripting attack due to the incorrect operation of the parameter...

6.1CVSS4.9AI score0.00491EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/07/31 12:00 a.m.•12 views

Portábilis i-Educar 代码注入漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portábilis i-Educar version 2.10, which stems from a cross-site scripting attack due to the incorrect operation of the parameter...

6.1CVSS4.9AI score0.00285EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/07/31 12:00 a.m.•18 views

Portábilis i-Educar 代码注入漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portábilis i-Educar version 2.9, which originates from a cross-site scripting attack due to the incorrect operation of the parameter...

6.1CVSS4.9AI score0.00491EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/07/31 12:00 a.m.•25 views

PT-2025-31472 · Unknown · Portabilis I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.10 Description: A flaw exists in Portabilis i-Educar 2.10 within the atendidos cad.php file. Manipulation of the nome/nome social/email argument can trigger cross-site scripting. This issue is remotely exploitabl...

6.1CVSS3.6AI score0.00285EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/07/31 12:00 a.m.•13 views

i-Educar 代码注入漏洞

i-Educar is a free educational software open source by Portábilis. A code injection vulnerability exists in i-Educar version 2.9, which originates from a cross-site scripting attack due to the incorrect operation of the parameter nome/matriculaservidor in the file /intranet/educarservidorlst.php...

6.1CVSS4.9AI score0.00407EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/31 12:00 a.m.•1 views

CVE-2025-8346: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue is some unknown functionality of the file /educaralunolst.php. The manipulation of the argument refcodmatricula with the input " leads to cross site scripting. The attack may b...

6.1CVSS3.9AI score0.00386EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/07/22 5:03 a.m.•25 views

CVE-2025-7867

A vulnerability has been found in Portabilis i-Educar 2.9.0/2.10.0. This vulnerability affects unknown code of the file /intranet/agenda.php of the component Agenda Module. The manipulation of the argument novotitulo/novodescricao leads to cross site scripting. It is possible to initiate the atta...

5.4CVSS3.6AI score0.00266EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/07/22 5:03 a.m.•20 views

CVE-2025-7868

A vulnerability was found in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /intranet/educarcalendariodiamotivocad.php of the component Calendar Module. The manipulation of the argument Motivo/descricao results in cross site scripting. It is possible to...

5.4CVSS3.7AI score0.00243EPSS
SaveExploits0References1
Rows per page
Query Builder