i-Educar SQL Injection Vulnerability

i-Educar is a free educational software from Portábilis open source. A SQL injection vulnerability exists in i-Educar version 2.10.0 and earlier, which stems from improper handling of the codagenda parameter and could lead to a SQL injection attack...

i-Educar code injection vulnerability

i-Educar is a free educational software from Portábilis Open Source. A code injection vulnerability exists in i-Educar 2.10 and earlier versions, which stems from a misuse of the parameter nmtipo in the file /intranet/educarturmatipocad.php, and could lead to a cross-site scripting attack...

i-Educar Access Control Vulnerability

i-Educar is a free educational software from Portábilis Open Source. An access control error vulnerability exists in i-Educar version 2.10 and earlier, which stems from improper access control in the file /enturmacao-em-lote/...