# Portabilis i-Educar.

Every CVE that names Portabilis i-Educar among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Portabilis i-Educar Endpoint educar_servidor_curso_lst.php cross site scripting](https://agentprime.io/advisories/CVE-2026-4355.md)
  `CVE-2026-4355` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 17 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar User Data meusdadod.php cross site scripting](https://agentprime.io/advisories/CVE-2026-2064.md)
  `CVE-2026-2064` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar Final Status Import FinalStatusImportService.php improper authorization](https://agentprime.io/advisories/CVE-2026-2015.md)
  `CVE-2026-2015` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: Privilege escalation, Broken access control
- [i-Educar 2.10.0 - Stored Cross-Site Scripting (XSS) in admin panel](https://agentprime.io/advisories/CVE-2025-9638.md)
  `CVE-2025-9638` · CVE record: Portabilis i-Educar · CVSS 4.8 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: Cross-site scripting (XSS)
- [i-Educar Authenticated Time-based SQL Injection in \`agenda.php\`](https://agentprime.io/advisories/CVE-2025-65022.md)
  `CVE-2025-65022` · CVE record: portabilis i-educar · CVSS 7.2 High · Not analysed yet · Published 19 Nov 2025 · Tags: SQL injection
- [i-Educar Authenticated Time-based SQL Injection in \`funcionario_vinculo_cad.php\`](https://agentprime.io/advisories/CVE-2025-65023.md)
  `CVE-2025-65023` · CVE record: portabilis i-educar · CVSS 7.2 High · Not analysed yet · Published 19 Nov 2025 · Tags: SQL injection
- [i-Educar Authenticated Time-based SQL Injection in \`agenda_admin_cad.php\`](https://agentprime.io/advisories/CVE-2025-65024.md)
  `CVE-2025-65024` · CVE record: portabilis i-educar · CVSS 7.2 High · Not analysed yet · Published 19 Nov 2025 · Tags: SQL injection
- [Portabilis i-Educar User Type AccessLevelController.php insecure inherited permissions](https://agentprime.io/advisories/CVE-2025-11554.md)
  `CVE-2025-11554` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Privilege escalation, CWE-277
- [Portabilis i-Educar periodo-lancamento improper authorization](https://agentprime.io/advisories/CVE-2025-11050.md)
  `CVE-2025-11050` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 27 Sept 2025 · Tags: Privilege escalation, Broken access control
- [Portabilis i-Educar unificacao-aluno improper authorization](https://agentprime.io/advisories/CVE-2025-11049.md)
  `CVE-2025-11049` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 27 Sept 2025 · Tags: Privilege escalation, Broken access control
- [Portabilis i-Educar consulta-dispensas improper authorization](https://agentprime.io/advisories/CVE-2025-11048.md)
  `CVE-2025-11048` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2025 · Tags: Privilege escalation, Broken access control
- [Portabilis i-Educar aluno improper authorization](https://agentprime.io/advisories/CVE-2025-11047.md)
  `CVE-2025-11047` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2025 · Tags: Privilege escalation, Broken access control
- [Portabilis i-Educar edit sql injection](https://agentprime.io/advisories/CVE-2025-10846.md)
  `CVE-2025-10846` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 23 Sept 2025 · Tags: Other injection, SQL injection
- [Portabilis i-Educar view sql injection](https://agentprime.io/advisories/CVE-2025-10845.md)
  `CVE-2025-10845` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 23 Sept 2025 · Tags: Other injection, SQL injection
- [Portabilis i-Educar aluno sql injection](https://agentprime.io/advisories/CVE-2025-10844.md)
  `CVE-2025-10844` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 23 Sept 2025 · Tags: Other injection, SQL injection
- [Portabilis i-Educar enrollment-history access control](https://agentprime.io/advisories/CVE-2025-10608.md)
  `CVE-2025-10608` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 17 Sept 2025 · Tags: Privilege escalation, Broken access control
- [Portabilis i-Educar diarioApi information disclosure](https://agentprime.io/advisories/CVE-2025-10607.md)
  `CVE-2025-10607` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 17 Sept 2025 · Tags: Information disclosure, Broken access control
- [Portabilis i-Educar ConfiguracaoMovimentoGeral cross site scripting](https://agentprime.io/advisories/CVE-2025-10606.md)
  `CVE-2025-10606` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 17 Sept 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar agenda_preferencias.php cross site scripting](https://agentprime.io/advisories/CVE-2025-10605.md)
  `CVE-2025-10605` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 17 Sept 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar Editar Função educar_funcao_cad.php cross site scripting](https://agentprime.io/advisories/CVE-2025-10591.md)
  `CVE-2025-10591` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 17 Sept 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar educar_usuario_det.php cross site scripting](https://agentprime.io/advisories/CVE-2025-10590.md)
  `CVE-2025-10590` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 17 Sept 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar educar_calendario_anotacao_cad.php cross site scripting](https://agentprime.io/advisories/CVE-2025-10584.md)
  `CVE-2025-10584` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 17 Sept 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar educar_turma_tipo_cad.php cross site scripting](https://agentprime.io/advisories/CVE-2025-10373.md)
  `CVE-2025-10373` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 13 Sept 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar educar_modulo_cad.php cross site scripting](https://agentprime.io/advisories/CVE-2025-10372.md)
  `CVE-2025-10372` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 13 Sept 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar Editar usuário educar_usuario_cad.php cross site scripting](https://agentprime.io/advisories/CVE-2025-10099.md)
  `CVE-2025-10099` · CVE record: Portabilis i-Educar · CVSS 4.8 Medium · Not analysed yet · Published 8 Sept 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar tipos cross site scripting](https://agentprime.io/advisories/CVE-2025-10074.md)
  `CVE-2025-10074` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 8 Sept 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar turma improper authorization](https://agentprime.io/advisories/CVE-2025-10073.md)
  `CVE-2025-10073` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2025 · Tags: Privilege escalation, Broken access control
- [Portabilis i-Educar enturmar access control](https://agentprime.io/advisories/CVE-2025-10072.md)
  `CVE-2025-10072` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2025 · Tags: Privilege escalation, Broken access control
- [Portabilis i-Educar cancelar-enturmacao-em-lote access control](https://agentprime.io/advisories/CVE-2025-10071.md)
  `CVE-2025-10071` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2025 · Tags: Privilege escalation, Broken access control
- [Portabilis i-Educar enturmacao-em-lote access control](https://agentprime.io/advisories/CVE-2025-10070.md)
  `CVE-2025-10070` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 7 Sept 2025 · Tags: Privilege escalation, Broken access control
- [Portabilis i-Educar exportacao-para-o-seb access control](https://agentprime.io/advisories/CVE-2025-10013.md)
  `CVE-2025-10013` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 5 Sept 2025 · Tags: Privilege escalation, Broken access control
- [Portabilis i-Educar educar_historico_escolar_lst.php sql injection](https://agentprime.io/advisories/CVE-2025-10012.md)
  `CVE-2025-10012` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 5 Sept 2025 · Tags: Other injection, SQL injection
- [Portabilis i-Educar edit sql injection](https://agentprime.io/advisories/CVE-2025-10011.md)
  `CVE-2025-10011` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 5 Sept 2025 · Tags: Other injection, SQL injection
- [Portabilis i-Educar Matricula API matricula improper authorization](https://agentprime.io/advisories/CVE-2025-9760.md)
  `CVE-2025-9760` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 1 Sept 2025 · Tags: Privilege escalation, Broken access control
- [Portabilis i-Educar educar_tipo_ensino_cad.php cross site scripting](https://agentprime.io/advisories/CVE-2025-9738.md)
  `CVE-2025-9738` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 31 Aug 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar educar_nivel_ensino_cad.php cross site scripting](https://agentprime.io/advisories/CVE-2025-9724.md)
  `CVE-2025-9724` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 31 Aug 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar educar_tipo_regime_cad.php cross site scripting](https://agentprime.io/advisories/CVE-2025-9723.md)
  `CVE-2025-9723` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 31 Aug 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar educar_tipo_ocorrencia_disciplinar_cad.php cross site scripting](https://agentprime.io/advisories/CVE-2025-9722.md)
  `CVE-2025-9722` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 31 Aug 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar edit cross site scripting](https://agentprime.io/advisories/CVE-2025-9721.md)
  `CVE-2025-9721` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 31 Aug 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar Cadastrar tabela de arredondamento edit cross site scripting](https://agentprime.io/advisories/CVE-2025-9720.md)
  `CVE-2025-9720` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 31 Aug 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar processamentoApi improper authorization](https://agentprime.io/advisories/CVE-2025-9687.md)
  `CVE-2025-9687` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 30 Aug 2025 · Tags: Privilege escalation, Broken access control
- [Portabilis i-Educar Listagem de áreas de conhecimento edit sql injection](https://agentprime.io/advisories/CVE-2025-9686.md)
  `CVE-2025-9686` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 30 Aug 2025 · Tags: Other injection, SQL injection
- [Portabilis i-Educar Listagem de áreas de conhecimento view sql injection](https://agentprime.io/advisories/CVE-2025-9685.md)
  `CVE-2025-9685` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 30 Aug 2025 · Tags: Other injection, SQL injection
- [Portabilis i-Educar Formula de Cálculo de Média edit sql injection](https://agentprime.io/advisories/CVE-2025-9684.md)
  `CVE-2025-9684` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 30 Aug 2025 · Tags: Other injection, SQL injection
- [Portabilis i-Educar Cadastrar projeto educar_projeto_cad.php cross site scripting](https://agentprime.io/advisories/CVE-2025-9653.md)
  `CVE-2025-9653` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 29 Aug 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar Cadastrar tipo de transferência educar_transferencia_tipo_cad.php cross site scripting](https://agentprime.io/advisories/CVE-2025-9652.md)
  `CVE-2025-9652` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 29 Aug 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar consulta improper authorization](https://agentprime.io/advisories/CVE-2025-9609.md)
  `CVE-2025-9609` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 29 Aug 2025 · Tags: Privilege escalation, Broken access control
- [Portabilis i-Educar Formula de Cálculo de Média view sql injection](https://agentprime.io/advisories/CVE-2025-9608.md)
  `CVE-2025-9608` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 29 Aug 2025 · Tags: Other injection, SQL injection
- [Portabilis i-Educar Tabelas de Arredondamento view sql injection](https://agentprime.io/advisories/CVE-2025-9607.md)
  `CVE-2025-9607` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 29 Aug 2025 · Tags: Other injection, SQL injection
- [Portabilis i-Educar agenda_preferencias.php sql injection](https://agentprime.io/advisories/CVE-2025-9606.md)
  `CVE-2025-9606` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 29 Aug 2025 · Tags: Other injection, SQL injection
- [Portabilis i-Educar view sql injection](https://agentprime.io/advisories/CVE-2025-9532.md)
  `CVE-2025-9532` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 27 Aug 2025 · Tags: Other injection, SQL injection
- [Portabilis i-Educar Agenda agenda.php sql injection](https://agentprime.io/advisories/CVE-2025-9531.md)
  `CVE-2025-9531` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 27 Aug 2025 · Tags: Other injection, SQL injection
- [Portabilis i-Educar Tipos de usuàrio educar_tipo_usuario_lst.php sql injection](https://agentprime.io/advisories/CVE-2025-9236.md)
  `CVE-2025-9236` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Other injection, SQL injection
- [Portabilis i-Educar Editar educar_instituicao_cad.php cross site scripting](https://agentprime.io/advisories/CVE-2025-8918.md)
  `CVE-2025-8918` · CVE record: Portabilis i-Educar · CVSS 4.8 Medium · Not analysed yet · Published 13 Aug 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar API Endpoint pessoa improper authorization](https://agentprime.io/advisories/CVE-2025-8790.md)
  `CVE-2025-8790` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 10 Aug 2025 · Tags: Privilege escalation, Broken access control
- [Portabilis i-Educar API Endpoint Diario authorization](https://agentprime.io/advisories/CVE-2025-8789.md)
  `CVE-2025-8789` · CVE record: Portabilis i-Educar · CVSS 5.3 Medium · Not analysed yet · Published 10 Aug 2025 · Tags: Broken access control
- [Portabilis i-Educar educar_usuario_lst.php cross site scripting](https://agentprime.io/advisories/CVE-2025-8785.md)
  `CVE-2025-8785` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 9 Aug 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar Cadastrar Vínculo funcionario_vinculo_cad.php cross site scripting](https://agentprime.io/advisories/CVE-2025-8784.md)
  `CVE-2025-8784` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 9 Aug 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar educar_motivo_afastamento_cad.php cross site scripting](https://agentprime.io/advisories/CVE-2025-8545.md)
  `CVE-2025-8545` · CVE record: Portabilis i-Educar · CVSS 4.8 Medium · Not analysed yet · Published 5 Aug 2025 · Tags: Cross-site scripting (XSS), Code injection
- [Portabilis i-Educar edit cross site scripting](https://agentprime.io/advisories/CVE-2025-8544.md)
  `CVE-2025-8544` · CVE record: Portabilis i-Educar · CVSS 4.8 Medium · Not analysed yet · Published 5 Aug 2025 · Tags: Cross-site scripting (XSS), Code injection

Older: <https://agentprime.io/advisories/technology/portabilis-i-educar.md?cursor=WyIyMDI1LTA4LTA1VDA0OjAyOjA0LjcxNTAwMFoiLCJDVkUtMjAyNS04NTQ0Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=portabilis-i-educar>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/portabilis-i-educar/>. Everything for agents: <https://agentprime.io/llms.txt>.