CVE-2025-9760

A weakness has been identified in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/Api/matricula of the component Matricula API. Executing manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made...

CVE-2025-9760 Portabilis i-Educar Matricula API matricula improper authorization

A weakness has been identified in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/Api/matricula of the component Matricula API. Executing manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made...

CVE-2025-9760

CVE-2025-9760 affects Portabilis i-Educar up to version 2.10, specifically the Matricula API component (notably the /module/Api/matricula path; some sources also reference /module/Api/aluno). The root cause is improper authorization due to manipulation of the Matricula API, enabling a remote atta...

CVE-2025-9760 Portabilis i-Educar Matricula API matricula improper authorization

A weakness has been identified in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/Api/matricula of the component Matricula API. Executing manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made...

i-Educar 安全漏洞

i-Educar is a free educational software from Portábilis Open Source. A security vulnerability exists in i-Educar version 2.10 and earlier, which stems from improper authorization due to incorrect manipulation of the component Matricula API in file/module/Api/aluno...

PT-2025-35447

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.10 Description: A weakness exists in the Matricula API component of Portabilis i-Educar. The issue affects an unknown part of the file /module/Api/aluno. Manipulation of this component can lead to improper...

CVE-2025-9738

A flaw has been found in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educartipoensinocad.php. Executing manipulation of the argument nmtipo can lead to cross site scripting. The attack can be executed remotely. The exploit has...

CVE-2025-9738

Portabilis i-Educar

CVE-2025-9738 Portabilis i-Educar educar_tipo_ensino_cad.php cross site scripting

A flaw has been found in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educartipoensinocad.php. Executing manipulation of the argument nmtipo can lead to cross site scripting. The attack can be executed remotely. The exploit has...

CVE-2025-9738 Portabilis i-Educar educar_tipo_ensino_cad.php cross site scripting

A flaw has been found in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educartipoensinocad.php. Executing manipulation of the argument nmtipo can lead to cross site scripting. The attack can be executed remotely. The exploit has...

CVE-2025-9738 Portabilis i-Educar educar_tipo_ensino_cad.php cross site scripting

A flaw has been found in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educartipoensinocad.php. Executing manipulation of the argument nmtipo can lead to cross site scripting. The attack can be executed remotely. The exploit has...

CVE-2025-9653

A vulnerability was identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educarprojetocad.php of the component Cadastrar projeto Page. Such manipulation of the argument nome/observacao leads to cross site scripting. It is...

CVE-2025-9652

A vulnerability was determined in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file /intranet/educartransferenciatipocad.php of the component Cadastrar tipo de transferência Page. This manipulation of the argument nmtipo/desctipo causes cross site scripting. It is possib...

CVE-2025-9724 Portabilis i-Educar educar_nivel_ensino_cad.php cross site scripting

A vulnerability was determined in Portabilis i-Educar up to 2.10. This impacts an unknown function of the file /intranet/educarnivelensinocad.php. Executing manipulation of the argument nmnivel/descricao can lead to cross site scripting. The attack can be launched remotely. The exploit has been...

CVE-2025-9724

CVE-2025-9724 affects Portabilis i-Educar up to version 2.10. The vulnerability lies in /intranet/educar_nivel_ensino_cad.php (specifically the nm_nivel/descricao arguments), where manipulation can trigger cross-site scripting. Exploitation can be performed remotely, and public disclosures of the...

CVE-2025-9724 Portabilis i-Educar educar_nivel_ensino_cad.php cross site scripting

A vulnerability was determined in Portabilis i-Educar up to 2.10. This impacts an unknown function of the file /intranet/educarnivelensinocad.php. Executing manipulation of the argument nmnivel/descricao can lead to cross site scripting. The attack can be launched remotely. The exploit has been...

CVE-2025-9724 Portabilis i-Educar educar_nivel_ensino_cad.php cross site scripting

A vulnerability was determined in Portabilis i-Educar up to 2.10. This impacts an unknown function of the file /intranet/educarnivelensinocad.php. Executing manipulation of the argument nmnivel/descricao can lead to cross site scripting. The attack can be launched remotely. The exploit has been...

CVE-2025-9723 Portabilis i-Educar educar_tipo_regime_cad.php cross site scripting

A vulnerability was found in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet/educartiporegimecad.php. Performing manipulation of the argument nmtipo results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and...

CVE-2025-9722

Portabilis i-Educar (up to 2.10) is affected. The vulnerability is a cross-site scripting in the file /intranet/educar_tipo_ocorrencia_disciplinar_cad.php, caused by improper handling of the nm_tipo/descricao (or nm_tipo_descricao) argument. It can be exploited remotely; public exploits exist. Co...

CVE-2025-9722 Portabilis i-Educar educar_tipo_ocorrencia_disciplinar_cad.php cross site scripting

A vulnerability has been found in Portabilis i-Educar up to 2.10. The impacted element is an unknown function of the file /intranet/educartipoocorrenciadisciplinarcad.php. Such manipulation of the argument nmtipo/descricao leads to cross site scripting. It is possible to launch the attack remotel...