i-Educar code injection vulnerability

i-Educar is a free educational software open source by Portábilis. A code injection vulnerability exists in i-Educar 2.9 and earlier versions, which stems from improper handling of the parameter nmpessoa/matricula/matriculainterna in the file /intranet/educarusuariolst.php, which could lead to a...