Portabilis

5 results · Clear filters · Feed

• High 7.2
  CVE-2025-65022

  i-Educar Authenticated Time-based SQL Injection in `agenda.php`

  i-Educar is free, fully online school management software. In versions 2.10.0 and prior, an authenticated time-based SQL injection vulnerability exists in the ieducar/intranet/agenda.php script. An attacker with access to an authenticated session can execute …

  Portabilis i-Educar
  Nov 19, 2025
• High 7.2
  CVE-2025-65023

  i-Educar Authenticated Time-based SQL Injection in `funcionario_vinculo_cad.php`

  i-Educar is free, fully online school management software. In versions 2.10.0 and prior, an authenticated time-based SQL injection vulnerability exists in the ieducar/intranet/funcionario_vinculo_cad.php script. An attacker with access to an authenticated ses…

  Portabilis i-Educar
  Nov 19, 2025
• High 7.2
  CVE-2025-65024

  i-Educar Authenticated Time-based SQL Injection in `agenda_admin_cad.php`

  i-Educar is free, fully online school management software. In versions 2.10.0 and prior, an authenticated time-based SQL injection vulnerability exists in the ieducar/intranet/agenda_admin_cad.php script. An attacker with access to an authenticated session ca…

  Portabilis i-Educar
  Nov 19, 2025
• High 8.8
  CVE-2024-45059

  Authenticated SQL Injection in i-Educar

  i-Educar is free, fully online school management software that can be used by school secretaries, teachers, coordinators, and area managers. A SQL Injection vulnerability was found prior to the 2.9 branch in the `ieducar/intranet/funcionario_vinculo_det.php` …

  Portabilis i-Educar
  Aug 28, 2024
• High 8.1
  CVE-2024-45058 Public exploit

  Privilege escalation in i-Educar

  i-Educar is free, fully online school management software that can be used by school secretaries, teachers, coordinators, and area managers. Prior to the 2.9 branch, an attacker with only minimal viewing privileges in the settings section is able to change th…

  Portabilis i-Educar
  Aug 28, 2024