Advisories · Technology
Portabilis i-Educar.
Every CVE that names Portabilis i-Educar among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
Portabilis i-Educar Endpoint educar_servidor_curso_lst.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar User Data meusdadod.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
Portabilis i-Educar Final Status Import FinalStatusImportService.php improper authorization
- Portabilis i-Educar
- Privilege escalation
- Broken access control
- CVSS 4.8 Medium
i-Educar 2.10.0 - Stored Cross-Site Scripting (XSS) in admin panel
- Portabilis i-Educar
- Cross-site scripting (XSS)
- CVSS 7.2 High
i-Educar Authenticated Time-based SQL Injection in `agenda.php`
- portabilis i-educar
- SQL injection
- CVSS 7.2 High
i-Educar Authenticated Time-based SQL Injection in `funcionario_vinculo_cad.php`
- portabilis i-educar
- SQL injection
- CVSS 7.2 High
i-Educar Authenticated Time-based SQL Injection in `agenda_admin_cad.php`
- portabilis i-educar
- SQL injection
- CVSS 5.3 Medium
Portabilis i-Educar User Type AccessLevelController.php insecure inherited permissions
- Portabilis i-Educar
- Privilege escalation
- CWE-277
- CVSS 5.3 Medium
Portabilis i-Educar periodo-lancamento improper authorization
- Portabilis i-Educar
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Portabilis i-Educar unificacao-aluno improper authorization
- Portabilis i-Educar
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Portabilis i-Educar consulta-dispensas improper authorization
- Portabilis i-Educar
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Portabilis i-Educar aluno improper authorization
- Portabilis i-Educar
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Portabilis i-Educar edit sql injection
- Portabilis i-Educar
- Other injection
- SQL injection
- CVSS 5.3 Medium
Portabilis i-Educar view sql injection
- Portabilis i-Educar
- Other injection
- SQL injection
- CVSS 5.3 Medium
Portabilis i-Educar aluno sql injection
- Portabilis i-Educar
- Other injection
- SQL injection
- CVSS 5.3 Medium
Portabilis i-Educar enrollment-history access control
- Portabilis i-Educar
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Portabilis i-Educar diarioApi information disclosure
- Portabilis i-Educar
- Information disclosure
- Broken access control
- CVSS 5.3 Medium
Portabilis i-Educar ConfiguracaoMovimentoGeral cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
Portabilis i-Educar agenda_preferencias.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar Editar Função educar_funcao_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
Portabilis i-Educar educar_usuario_det.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar educar_calendario_anotacao_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar educar_turma_tipo_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar educar_modulo_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
Portabilis i-Educar Editar usuário educar_usuario_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar tipos cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
Portabilis i-Educar turma improper authorization
- Portabilis i-Educar
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Portabilis i-Educar enturmar access control
- Portabilis i-Educar
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Portabilis i-Educar cancelar-enturmacao-em-lote access control
- Portabilis i-Educar
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Portabilis i-Educar enturmacao-em-lote access control
- Portabilis i-Educar
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Portabilis i-Educar exportacao-para-o-seb access control
- Portabilis i-Educar
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Portabilis i-Educar educar_historico_escolar_lst.php sql injection
- Portabilis i-Educar
- Other injection
- SQL injection
- CVSS 5.3 Medium
Portabilis i-Educar edit sql injection
- Portabilis i-Educar
- Other injection
- SQL injection
- CVSS 5.3 Medium
Portabilis i-Educar Matricula API matricula improper authorization
- Portabilis i-Educar
- Privilege escalation
- Broken access control
- CVSS 5.1 Medium
Portabilis i-Educar educar_tipo_ensino_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar educar_nivel_ensino_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar educar_tipo_regime_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar educar_tipo_ocorrencia_disciplinar_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar edit cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar Cadastrar tabela de arredondamento edit cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
Portabilis i-Educar processamentoApi improper authorization
- Portabilis i-Educar
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Portabilis i-Educar Listagem de áreas de conhecimento edit sql injection
- Portabilis i-Educar
- Other injection
- SQL injection
- CVSS 5.3 Medium
Portabilis i-Educar Listagem de áreas de conhecimento view sql injection
- Portabilis i-Educar
- Other injection
- SQL injection
- CVSS 5.3 Medium
Portabilis i-Educar Formula de Cálculo de Média edit sql injection
- Portabilis i-Educar
- Other injection
- SQL injection
- CVSS 5.1 Medium
Portabilis i-Educar Cadastrar projeto educar_projeto_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar Cadastrar tipo de transferência educar_transferencia_tipo_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
Portabilis i-Educar consulta improper authorization
- Portabilis i-Educar
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Portabilis i-Educar Formula de Cálculo de Média view sql injection
- Portabilis i-Educar
- Other injection
- SQL injection
- CVSS 5.3 Medium
Portabilis i-Educar Tabelas de Arredondamento view sql injection
- Portabilis i-Educar
- Other injection
- SQL injection
- CVSS 5.3 Medium
Portabilis i-Educar agenda_preferencias.php sql injection
- Portabilis i-Educar
- Other injection
- SQL injection
- CVSS 5.3 Medium
Portabilis i-Educar view sql injection
- Portabilis i-Educar
- Other injection
- SQL injection
- CVSS 5.3 Medium
Portabilis i-Educar Agenda agenda.php sql injection
- Portabilis i-Educar
- Other injection
- SQL injection
- CVSS 5.3 Medium
Portabilis i-Educar Tipos de usuàrio educar_tipo_usuario_lst.php sql injection
- Portabilis i-Educar
- Other injection
- SQL injection
- CVSS 4.8 Medium
Portabilis i-Educar Editar educar_instituicao_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
Portabilis i-Educar API Endpoint pessoa improper authorization
- Portabilis i-Educar
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Portabilis i-Educar API Endpoint Diario authorization
- Portabilis i-Educar
- Broken access control
- CVSS 5.1 Medium
Portabilis i-Educar educar_usuario_lst.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Portabilis i-Educar Cadastrar Vínculo funcionario_vinculo_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
Portabilis i-Educar educar_motivo_afastamento_cad.php cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
Portabilis i-Educar edit cross site scripting
- Portabilis i-Educar
- Cross-site scripting (XSS)
- Code injection