Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2025-9236

Portabilis i-Educar Tipos de usuàrio educar_tipo_usuario_lst.php sql injection

CVSS 4.0 5.3 MEDIUMCVSS 3.1 6.3 MEDIUMCVSS 3.0 6.3 MEDIUMCVSS 2.0 6.5 Check source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2025-9236

Published

A vulnerability has been found in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet/educar_tipo_usuario_lst.php of the component Tipos de usuàrio Page. Such manipulation of the argument nm_tipo/descrição leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. Upgrading to version 2.12 mitigates this issue. Upgrading the affected component is advised. The vendor confirms: "The reported attack vector was tested against the corrected code, and the previously described SQL Injection behavior could no longer be reproduced."

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2025-9236

Published

i-Educar

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Portabilis",
                    "product": "i-Educar",
                    "versions": [
                        {
                            "version": "2.0",
                            "status": "affected"
                        },
                        {
                            "version": "2.1",
                            "status": "affected"
                        },
                        {
                            "version": "2.2",
                            "status": "affected"
                        },
                        {
                            "version": "2.3",
                            "status": "affected"
                        },
                        {
                            "version": "2.4",
                            "status": "affected"
                        },
                        {
                            "version": "2.5",
                            "status": "affected"
                        },
                        {
                            "version": "2.6",
                            "status": "affected"
                        },
                        {
                            "version": "2.7",
                            "status": "affected"
                        },
                        {
                            "version": "2.8",
                            "status": "affected"
                        },
                        {
                            "version": "2.9",
                            "status": "affected"
                        },
                        {
                            "version": "2.10",
                            "status": "affected"
                        },
                        {
                            "version": "2.12",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:portabilis:i-educar:*:*:*:*:*:*:*:*"
                    ],
                    "modules": [
                        "Tipos de usuàrio Page"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON