Portabilis I-Educar vulnerabilities

CVE-2025-8367 [MEDIUM] CWE-79 CVE-2025-8367: A vulnerability classified as problematic has been found in Portabilis i-Educar 2.9. This affects an A vulnerability classified as problematic has been found in Portabilis i-Educar 2.9. This affects an unknown part of the file /intranet/funcionario_vinculo_lst.php. The manipulation of the argument nome leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor

CVE-2025-10605 [MEDIUM] CWE-79 CVE-2025-10605: A security flaw has been discovered in Portabilis i-Educar up to 2.10. This vulnerability affects un A security flaw has been discovered in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /agenda_preferencias.php. The manipulation of the argument tipoacao results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be exploited.

CVE-2025-10590 [MEDIUM] CWE-79 CVE-2025-10590: A security flaw has been discovered in Portabilis i-Educar up to 2.10. The impacted element is an un A security flaw has been discovered in Portabilis i-Educar up to 2.10. The impacted element is an unknown function of the file /intranet/educar_usuario_det.php. The manipulation of the argument ref_pessoa results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

CVE-2025-8365 [MEDIUM] CWE-79 CVE-2025-8365: A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. Affected A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file atendidos_cad.php. The manipulation of the argument nome/nome_social/email leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and

CVE-2025-10373 [MEDIUM] CWE-79 CVE-2025-10373: A security vulnerability has been detected in Portabilis i-Educar up to 2.10. The affected element i A security vulnerability has been detected in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /intranet/educar_turma_tipo_cad.php. Such manipulation of the argument nm_tipo leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

CVE-2026-2064 [MEDIUM] CWE-79 CVE-2026-2064: A vulnerability was identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is A vulnerability was identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/meusdadod.php of the component User Data Page. Such manipulation of the argument File leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might b

CVE-2025-10606 [MEDIUM] CWE-79 CVE-2025-10606: A weakness has been identified in Portabilis i-Educar up to 2.10. This issue affects some unknown pr A weakness has been identified in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /module/Configuracao/ConfiguracaoMovimentoGeral. This manipulation of the argument tipoacao causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be

CVE-2025-8508 [MEDIUM] CWE-79 CVE-2025-8508: A vulnerability was found in Portabilis i-Educar 2.9. It has been declared as problematic. Affected A vulnerability was found in Portabilis i-Educar 2.9. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /intranet/educar_avaliacao_desempenho_cad.php. The manipulation of the argument titulo_avaliacao/descricao leads to cross site scripting. The attack can be launched remotely. The exploit has be

CVE-2025-7866 [MEDIUM] CWE-79 CVE-2025-7866: A vulnerability was found in Portabilis i-Educar 2.9.0. It has been rated as problematic. This issue A vulnerability was found in Portabilis i-Educar 2.9.0. It has been rated as problematic. This issue affects some unknown processing of the file /intranet/educar_deficiencia_lst.php of the component Disabilities Module. The manipulation of the argument Deficiência ou Transtorno leads to cross site scripting. The attack may be initiated remotely. The ex

CVE-2025-8785 [MEDIUM] CWE-79 CVE-2025-8785: A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar up to 2. A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar up to 2.9. This issue affects some unknown processing of the file /intranet/educar_usuario_lst.php. The manipulation of the argument nm_pessoa/matricula/matricula_interna leads to cross site scripting. The attack may be initiated remotely. The exploit has been d

CVE-2025-8784 [MEDIUM] CWE-79 CVE-2025-8784: A vulnerability classified as problematic was found in Portabilis i-Educar up to 2.9. This vulnerabi A vulnerability classified as problematic was found in Portabilis i-Educar up to 2.9. This vulnerability affects unknown code of the file /intranet/funcionario_vinculo_cad.php of the component Cadastrar Vínculo Page. The manipulation of the argument nome leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed

CVE-2025-10584 [MEDIUM] CWE-79 CVE-2025-10584: A vulnerability was identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of A vulnerability was identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /intranet/educar_calendario_anotacao_cad.php. Such manipulation of the argument nm_anotacao/descricao leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

CVE-2025-8509 [MEDIUM] CWE-79 CVE-2025-8509: A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /intranet/educar_servidor_cad.php. The manipulation of the argument matricula leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be

CVE-2025-8507 [MEDIUM] CWE-79 CVE-2025-8507: A vulnerability was found in Portabilis i-Educar 2.9. It has been classified as problematic. Affecte A vulnerability was found in Portabilis i-Educar 2.9. It has been classified as problematic. Affected is an unknown function of the file /intranet/educar_funcao_lst.php. The manipulation of the argument nm_funcao/abreviatura leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may

CVE-2025-7112 [MEDIUM] CWE-79 CVE-2025-7112: A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue aff A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown processing of the file /intranet/educar_funcao_det.php?cod_funcao=COD&ref_cod_instituicao=COD of the component Function Management Module. The manipulation of the argument Função leads to cross site scripting. The attack may be initiate

CVE-2025-7113 [MEDIUM] CWE-79 CVE-2025-7113: A vulnerability was found in Portabilis i-Educar 2.9.0. It has been classified as problematic. Affec A vulnerability was found in Portabilis i-Educar 2.9.0. It has been classified as problematic. Affected is an unknown function of the file /module/ComponenteCurricular/edit?id=ID of the component Curricular Components Module. The manipulation of the argument Nome leads to cross site scripting. It is possible to launch the attack remotely. The exploit h

CVE-2025-10372 [MEDIUM] CWE-79 CVE-2025-10372: A weakness has been identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of A weakness has been identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /intranet/educar_modulo_cad.php. This manipulation of the argument nm_tipo/descricao causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited.

CVE-2025-9723 [MEDIUM] CWE-79 CVE-2025-9723: A vulnerability was found in Portabilis i-Educar up to 2.10. This affects an unknown function of the A vulnerability was found in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet/educar_tipo_regime_cad.php. Performing manipulation of the argument nm_tipo results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and could be used.

CVE-2024-12893 [MEDIUM] CWE-79 CVE-2024-12893: A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar up to 2. A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar up to 2.9. Affected by this issue is some unknown functionality of the file /usuarios/tipos/2 of the component Tipo de Usuário Page. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been

CVE-2025-8510 [MEDIUM] CWE-79 CVE-2025-8510: A vulnerability classified as problematic has been found in Portabilis i-Educar 2.10. This affects t A vulnerability classified as problematic has been found in Portabilis i-Educar 2.10. This affects the function Gerar of the file ieducar/intranet/educar_matricula_lst.php. The manipulation of the argument ref_cod_aluno leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be