Vulnerabilities

TI-2026-03791 CVE-2026-4355 · GHSA-7cgm-xpmc-6mg5

Portabilis i-Educar Endpoint educar_servidor_curso_lst.php cross site scripting

MEDIUM 56

A vulnerability was detected in Portabilis i-Educar 2.11.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00203 Published 2026-03-17 No fix listed CWE-79

TI-2026-01719 CVE-2026-2064 · GHSA-gvvr-69ch-5mhm

Portabilis i-Educar User Data meusdadod.php cross site scripting

MEDIUM 56

A vulnerability was identified in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00264 Published 2026-02-06 No fix listed CWE-79

TI-2026-01672 CVE-2026-2015 · GHSA-38hg-hfvc-c347

Portabilis i-Educar Final Status Import FinalStatusImportService.php improper authorization

MEDIUM 57

A weakness has been identified in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00351 Published 2026-02-06 Fixed in 2.11.0 CWE-266

TI-2025-08831 CVE-2025-9638 · GHSA-5fhv-xmq2-vprc

i-Educar 2.10.0 - Stored Cross-Site Scripting (XSS) in admin panel

MEDIUM 55

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Portabilis i-Educar allows Stored Cross-Site Scripting (XSS) via the matricula_interna parameter in the educar_usuario…

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00215 Published 2025-12-09 No fix listed CWE-79

TI-2025-40208 CVE-2025-65022

i-Educar Authenticated Time-based SQL Injection in `agenda.php`

HIGH 67

i-Educar is free, fully online school management software.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00336 Published 2025-11-19 No fix listed CWE-89

TI-2025-40209 CVE-2025-65023

i-Educar Authenticated Time-based SQL Injection in `funcionario_vinculo_cad.php`

HIGH 67

i-Educar is free, fully online school management software.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00433 Published 2025-11-19 No fix listed CWE-89

TI-2025-40210 CVE-2025-65024

i-Educar Authenticated Time-based SQL Injection in `agenda_admin_cad.php`

HIGH 67

i-Educar is free, fully online school management software.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00433 Published 2025-11-19 No fix listed CWE-89

TI-2025-10589 CVE-2025-11554 · GHSA-jff6-cpxv-52x3

Portabilis i-Educar User Type AccessLevelController.php insecure inherited permissions

MEDIUM 57

A security vulnerability has been detected in Portabilis i-Educar up to 2.9.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00384 Published 2025-10-09 Fixed in 2.12 CWE-266

TI-2025-10120 CVE-2025-11050 · GHSA-ff6r-j98m-43x2

Portabilis i-Educar periodo-lancamento improper authorization

MEDIUM 57

A flaw has been found in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00387 Published 2025-09-27 No fix listed CWE-266

TI-2025-10119 CVE-2025-11049 · GHSA-h86j-42vm-x99f

Portabilis i-Educar unificacao-aluno improper authorization

MEDIUM 57

A vulnerability was detected in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00387 Published 2025-09-27 No fix listed CWE-266

TI-2025-10118 CVE-2025-11048 · GHSA-pf8x-2fqc-p3pr

Portabilis i-Educar consulta-dispensas improper authorization

MEDIUM 57

A security vulnerability has been detected in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00387 Published 2025-09-26 No fix listed CWE-266

TI-2025-10117 CVE-2025-11047 · GHSA-w6cf-49cq-m6fh

Portabilis i-Educar aluno improper authorization

MEDIUM 57

A weakness has been identified in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00387 Published 2025-09-26 No fix listed CWE-266

TI-2025-09936 CVE-2025-10846 · GHSA-m43j-2jmj-r98g

Portabilis i-Educar edit sql injection

LOW 32

A vulnerability was determined in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00438 Published 2025-09-23 No fix listed CWE-74

TI-2025-09935 CVE-2025-10845 · GHSA-q4qv-52x7-v238

Portabilis i-Educar view sql injection

LOW 32

A vulnerability was found in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00438 Published 2025-09-23 No fix listed CWE-74

TI-2025-09934 CVE-2025-10844 · GHSA-6gx7-q299-g2j8

Portabilis i-Educar aluno sql injection

LOW 32

A vulnerability has been found in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00438 Published 2025-09-23 No fix listed CWE-74

TI-2025-09709 CVE-2025-10608 · GHSA-chpj-58v7-mcrw

Portabilis i-Educar enrollment-history access control

MEDIUM 57

A vulnerability was detected in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00387 Published 2025-09-17 No fix listed CWE-266

TI-2025-09708 CVE-2025-10607 · GHSA-ww29-3xw7-ggwm

Portabilis i-Educar diarioApi information disclosure

MEDIUM 57

A security vulnerability has been detected in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00409 Published 2025-09-17 No fix listed CWE-200

TI-2025-09707 CVE-2025-10606 · GHSA-f7f6-h56m-x7rv

Portabilis i-Educar ConfiguracaoMovimentoGeral cross site scripting

MEDIUM 57

A weakness has been identified in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00395 Published 2025-09-17 No fix listed CWE-79

TI-2025-09706 CVE-2025-10605 · GHSA-cp3x-4pw5-xr6c

Portabilis i-Educar agenda_preferencias.php cross site scripting

MEDIUM 57

A security flaw has been discovered in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00395 Published 2025-09-17 No fix listed CWE-79

TI-2025-09692 CVE-2025-10591 · GHSA-ph27-7p9v-562p

Portabilis i-Educar Editar Função educar_funcao_cad.php cross site scripting

MEDIUM 64

A weakness has been identified in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00241 Published 2025-09-17 No fix listed CWE-79

TI-2025-09691 CVE-2025-10590 · GHSA-cmxj-57gf-v8fj

Portabilis i-Educar educar_usuario_det.php cross site scripting

MEDIUM 59

A security flaw has been discovered in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00335 Published 2025-09-17 No fix listed CWE-79

TI-2025-09685 CVE-2025-10584 · GHSA-vwfw-9fqw-jjvp

Portabilis i-Educar educar_calendario_anotacao_cad.php cross site scripting

MEDIUM 56

A vulnerability was identified in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0029 Published 2025-09-17 No fix listed CWE-79

TI-2025-09510 CVE-2025-10373 · GHSA-7vvg-4g6w-39mf

Portabilis i-Educar educar_turma_tipo_cad.php cross site scripting

MEDIUM 56

A security vulnerability has been detected in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00245 Published 2025-09-13 No fix listed CWE-79

TI-2025-09509 CVE-2025-10372 · GHSA-xhc6-mmf6-vvgh

Portabilis i-Educar educar_modulo_cad.php cross site scripting

MEDIUM 56

A weakness has been identified in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00241 Published 2025-09-13 No fix listed CWE-79

TI-2025-09272 CVE-2025-10099 · GHSA-v7g2-xh82-qmcx

Portabilis i-Educar Editar usuário educar_usuario_cad.php cross site scripting

MEDIUM 55

A weakness has been identified in Portabilis i-Educar up to 2.10.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00353 Published 2025-09-08 Fixed in 2.12 CWE-79

Vulnerabilities

Filters