CVE-2025-10584 Portabilis i-Educar educar_calendario_anotacao_cad.php cross site scripting

A vulnerability was identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /intranet/educarcalendarioanotacaocad.php. Such manipulation of the argument nmanotacao/descricao leads to cross site scripting. It is possible to launch the attack remotely. The exploit ...

i-Educar 代码注入漏洞

i-Educar is a free educational software from Portábilis Open Source. A code injection vulnerability exists in i-Educar 2.10 and earlier versions, which stems from a misuse of the parameter nmanotacao/descricao in the file /intranet/educarcalendarioanotacaocad.php, which could lead to a cross-site...

PT-2025-38245

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions prior to 2.11 Description: A security issue has been identified in Portabilis i-Educar. The vulnerability involves an unknown function within the /module/Avaliacao/diarioApi file, leading to information disclosure...

i-Educar 代码注入漏洞

i-Educar is a free educational software from Portábilis Open Source. A code injection vulnerability exists in i-Educar 2.10 and earlier versions, which stems from misuse of the parameter tipoacao in the file /module/Configuracao/ConfiguracaoMovimentoGeral, and could lead to a cross-site scripting...

PT-2025-38140

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.10 Description: A weakness exists in Portabilis i-Educar up to version 2.10. The issue is related to the manipulation of the abreviatura/tipoacao argument in the /intranet/educar funcao cad.php file within...

PT-2025-38244

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.10 Description: A weakness has been identified in Portabilis i-Educar that allows for cross site scripting. The issue affects unknown processing of the file /module/Configuracao/ConfiguracaoMovimentoGeral...

i-Educar 代码注入漏洞

i-Educar is a free educational software open source by Portábilis. A code injection vulnerability exists in i-Educar 2.10 and earlier versions, which stems from a misbehavior of the parameter abreviatura/tipoacao in the file /intranet/educarfuncaocad.php, which could lead to a cross-site scriptin...

i-Educar 访问控制错误漏洞

i-Educar is a free educational software from Portábilis Open Source. An access control error vulnerability exists in i-Educar version 2.10 and earlier, which stems from improper manipulation of unknown functions in the file /module/Avaliacao/diarioApi, which could lead to information disclosure...

i-Educar 访问控制错误漏洞

i-Educar is a free educational software from Portábilis Open Source. An access control error vulnerability exists in i-Educar version 2.10 and earlier, which stems from improper access control of unknown functions in the file /enrollment-history/, which could lead to a remote attack...

i-Educar 安全漏洞

i-Educar is a free educational software from Portábilis Open Source. A security vulnerability exists in i-Educar version 2.10 and earlier, which stems from the incorrect manipulation of the parameter tipoacao in the file /agendapreferencias.php, which could lead to a cross-site scripting attack...

PT-2025-38139

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.10 Description: A security flaw exists in Portabilis i-Educar up to version 2.10. The flaw is related to cross site scripting, triggered by manipulating the ref pessoa argument of an unknown function withi...

i-Educar 代码注入漏洞

i-Educar is a free educational software open source by Portábilis. A code injection vulnerability exists in i-Educar version 2.10 and earlier, which stems from a misuse of the parameter refpessoa in the file /intranet/educarusuariodet.php, which could lead to a cross-site scripting attack...

PT-2025-38249

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.10 Description: A vulnerability exists in Portabilis i-Educar up to version 2.10. The issue involves improper access controls due to manipulation of an unknown function within the /enrollment-history/ file...

PT-2025-38240

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.10 Description: A security flaw has been discovered in Portabilis i-Educar. The vulnerability affects unknown code within the /agenda preferencias.php file. Manipulation of the tipoacao argument can lead t...

CVE-2025-10373

A security vulnerability has been detected in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /intranet/educarturmatipocad.php. Such manipulation of the argument nmtipo leads to cross site scripting. It is possible to launch the attack remotely. The exploit...

CVE-2025-10373 Portabilis i-Educar educar_turma_tipo_cad.php cross site scripting

A security vulnerability has been detected in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /intranet/educarturmatipocad.php. Such manipulation of the argument nmtipo leads to cross site scripting. It is possible to launch the attack remotely. The exploit...

CVE-2025-10373 Portabilis i-Educar educar_turma_tipo_cad.php cross site scripting

A security vulnerability has been detected in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /intranet/educarturmatipocad.php. Such manipulation of the argument nmtipo leads to cross site scripting. It is possible to launch the attack remotely. The exploit...

CVE-2025-10373

Portabilis i-Educar up to version 2.10 is affected by a cross-site scripting (XSS) vulnerability in the /intranet/educar_turma_tipo_cad.php file. The issue arises from manipulation of the nm_tipo argument in an unknown function, allowing remote exploitation after interaction with the vulnerable p...

CVE-2025-10373 Portabilis i-Educar educar_turma_tipo_cad.php cross site scripting

A security vulnerability has been detected in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /intranet/educarturmatipocad.php. Such manipulation of the argument nmtipo leads to cross site scripting. It is possible to launch the attack remotely. The exploit...

CVE-2025-10372

A weakness has been identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /intranet/educarmodulocad.php. This manipulation of the argument nmtipo/descricao causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made...