CVE-2025-8367

CVE-2025-8367 affects Portabilis i-Educar 2.9, specifically the file /intranet/funcionario_vinculo_lst.php where manipulation of the parameter nome enables cross-site scripting (XSS). The issue can be triggered remotely and the exploit has been publicly disclosed; the vendor reportedly did not re...

CVE-2025-8367 Portabilis i-Educar funcionario_vinculo_lst.php cross site scripting

A vulnerability classified as problematic has been found in Portabilis i-Educar 2.9. This affects an unknown part of the file /intranet/funcionariovinculolst.php. The manipulation of the argument nome leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-8366 Portabilis i-Educar educar_servidor_lst.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /intranet/educarservidorlst.php. The manipulation of the argument nome/matriculaservidor leads to cross site scripting. The attack may be launch...

CVE-2025-8366

CVE-2025-8366 affects Portabilis i-Educar 2.9. The vulnerability resides in the/educar_servidor_lst.php script, where manipulation of the nome/matricula_servidor parameter enables cross-site scripting. The attack can be launched remotely, and exploits have been publicly disclosed. Multiple source...

CVE-2025-8366 Portabilis i-Educar educar_servidor_lst.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /intranet/educarservidorlst.php. The manipulation of the argument nome/matriculaservidor leads to cross site scripting. The attack may be launch...

CVE-2025-8366 Portabilis i-Educar educar_servidor_lst.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /intranet/educarservidorlst.php. The manipulation of the argument nome/matriculaservidor leads to cross site scripting. The attack may be launch...

CVE-2025-8365

A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file atendidoscad.php. The manipulation of the argument nome/nomesocial/email leads to cross site scripting. The attack can be launched...

CVE-2025-8365 Portabilis i-Educar atendidos_cad.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file atendidoscad.php. The manipulation of the argument nome/nomesocial/email leads to cross site scripting. The attack can be launched...

CVE-2025-8365

Portabilis i-Educar 2.10 contains a cross-site scripting (XSS) vulnerability in atendidos_cad.php. Manipulation of the nome, nome_social, or email parameters can trigger XSS; the issue is remotely exploitable and the exploit has been publicly disclosed. Remediation guidance from PT-2025-31472 sug...

CVE-2025-8365 Portabilis i-Educar atendidos_cad.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file atendidoscad.php. The manipulation of the argument nome/nomesocial/email leads to cross site scripting. The attack can be launched...

CVE-2025-8365 Portabilis i-Educar atendidos_cad.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file atendidoscad.php. The manipulation of the argument nome/nomesocial/email leads to cross site scripting. The attack can be launched...

CVE-2025-8346

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue is some unknown functionality of the file /educaralunolst.php. The manipulation of the argument refcodmatricula with the input " leads to cross site scripting. The attack may b...

CVE-2025-8346 Portabilis i-Educar educar_aluno_lst.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue is some unknown functionality of the file /educaralunolst.php. The manipulation of the argument refcodmatricula with the input " leads to cross site scripting. The attack may b...

CVE-2025-8346 Portabilis i-Educar educar_aluno_lst.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue is some unknown functionality of the file /educaralunolst.php. The manipulation of the argument refcodmatricula with the input " leads to cross site scripting. The attack may b...

CVE-2025-8346 Portabilis i-Educar educar_aluno_lst.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue is some unknown functionality of the file /educaralunolst.php. The manipulation of the argument refcodmatricula with the input " leads to cross site scripting. The attack may b...

CVE-2025-8346

Portabilis i-Educar 2.10 is affected. The vulnerability is a cross-site scripting flaw in educar_aluno_lst.php via the ref_cod_matricula parameter, exploitable remotely by injecting input like >, with user interaction required. Remediation: update to a newer Portabilis i-Educar version and san...

Portábilis i-Educar 代码注入漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portábilis i-Educar version 2.9, which originates from a cross-site scripting attack due to the incorrect operation of the parameter...

PT-2025-31475 · Portabilis · I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.9 Description: A problematic issue exists in Portabilis i-Educar 2.9, affecting an unknown functionality within the file /intranet/educar servidor lst.php. Manipulation of the nome/matricula servidor argument can...

i-Educar 安全漏洞

i-Educar is a free educational software from Portábilis Open Source. A security vulnerability exists in i-Educar version 2.10, which stems from a cross-site scripting attack due to the incorrect operation of the parameter refcodmatricula in the file /educaralunolst.php...

Portábilis i-Educar 代码注入漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portábilis i-Educar version 2.9, which originates from a cross-site scripting attack due to the incorrect operation of parameter nome in file...