CVE-2024-12893 Portabilis i-Educar Tipo de Usuário Page 2 cross site scripting

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar up to 2.9. Affected by this issue is some unknown functionality of the file /usuarios/tipos/2 of the component Tipo de Usuário Page. The manipulation of the argument name leads to cross site scripting. The...

PT-2024-17780 · Portabilis · Portabilis I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.9 Description: A problematic issue has been found in Portabilis i-Educar, affecting some unknown functionality of the file /usuarios/tipos/2 of the component Tipo de Usuário Page. The manipulation of the...

Portábilis i-Educar 代码注入漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portábilis i-Educar version 2.9 and earlier versions, which stems from the fact that incorrect manipulation of the parameter name can lead to...

CVE-2024-55239

A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker to craft malicious urls with arbitrary javascript in the 'titulodocumento' parameter...

CVE-2024-55239

A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker to craft malicious urls with arbitrary javascript in the 'titulodocumento' parameter...

PT-2024-36499 · Portabilis · Portabilis I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.9 Description: A reflected Cross-Site Scripting issue exists in the standard documentation upload functionality, allowing an attacker to craft malicious URLs with arbitrary javascript in the titulo documento...

i-Educar 安全漏洞

i-Educar is a free educational software open source by Portábilis. A security vulnerability exists in i-Educar that stems from a reflected cross-site scripting vulnerability in the product upload feature...

CVE-2024-55239

A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker to craft malicious urls with arbitrary javascript in the 'titulodocumento' parameter...

CVE-2024-55239

A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker to craft malicious urls with arbitrary javascript in the 'titulodocumento' parameter...

CVE-2024-55239

Portabilis i-Educar 2.9 is affected by a reflected XSS in the standard documentation upload functionality, exploitable via the titulo_documento parameter to craft malicious URLs with arbitrary JavaScript. CVE-2024-55239 is rated CVSS v3.1 base 5.4 (Medium). Exploitation details are not described ...

CVE-2024-48325

Portabilis i-Educar 2.8.0 is vulnerable to SQL Injection in the "getDocuments" function of the "InstituicaoDocumentacaoController" class. The "instituicaoid" parameter in "/module/Api/InstituicaoDocumentacao?oper=get&resource=getDocuments&instituicaoid" is not properly sanitized, allowing an...

CVE-2024-48325

CVE-2024-48325 affects Portabilis i-Educar 2.8.0. A SQL injection exists in getDocuments() of InstituicaoDocumentacaoController where the instituicao_id parameter is interpolated into SQL without sanitization, enabling unauthenticated remote exploitation. Multiple connected sources confirm the is...

CVE-2024-48325

Portabilis i-Educar 2.8.0 is vulnerable to SQL Injection in the "getDocuments" function of the "InstituicaoDocumentacaoController" class. The "instituicaoid" parameter in "/module/Api/InstituicaoDocumentacao?oper=get&resource=getDocuments&instituicaoid" is not properly sanitized, allowing an...

CVE-2024-48325

Portabilis i-Educar 2.8.0 is vulnerable to SQL Injection in the "getDocuments" function of the "InstituicaoDocumentacaoController" class. The "instituicaoid" parameter in "/module/Api/InstituicaoDocumentacao?oper=get&resource=getDocuments&instituicaoid" is not properly sanitized, allowing an...

CVE-2024-48325

Portabilis i-Educar 2.8.0 is vulnerable to SQL Injection in the "getDocuments" function of the "InstituicaoDocumentacaoController" class. The "instituicaoid" parameter in "/module/Api/InstituicaoDocumentacao?oper=get&resource=getDocuments&instituicaoid" is not properly sanitized, allowing an...

Portábilis i-Educar SQL注入漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A SQL injection vulnerability exists in Portábilis i-Educar version 2.8.0, which stems from improper parameter cleanup and is susceptible to SQL injection attacks...

Exploit for CVE-2024-48326

CVE-2024-48326 Description: Portabilis i-Educar v2.8.0...

Exploit for SQL Injection in Portabilis I-Educar

CVE-2024-48325 Description: An authenticated user can...

PT-2024-33081 · Portabilis · Portabilis I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.8.0 Description: The issue concerns a SQL injection vulnerability in the getDocuments function of the InstituicaoDocumentacaoController class. The instituicao id parameter in the...

PT-2024-33082 · Portabilis · Portabilis I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.9.0 Description: The issue concerns a Cross-Site Scripting XSS vulnerability. It can be exploited via the nm religiao parameter in the "/intranet/educar religiao lst.php?busca=S&nm religiao=" endpoint...