Skip to content

Vendor

portabilis vulnerabilities

109 published CVES affecting portabilis, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
109
Critical
0
High
6
Medium
102
Low
1
Unscored
0
CISA KEV
0
Atom feed of portabilis alerts

Products

Latest portabilis CVEs

Newest publication first · page 1 of 5

  2. CVE-2026-2064 Portabilis i-Educar User Data meusdadod.php cross site scripting

    Published
    MediumCVSS 5.1 EPSS 0.26%

    A vulnerability was identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/meusdadod.php of the component User Data Page. Such manipulation of the argument File leads to cross site scripting. It is possible t...

  5. CVE-2025-65022 i-Educar Authenticated Time-based SQL Injection in `agenda.php`

    Published
    HighCVSS 7.2 EPSS 0.34%

    i-Educar is free, fully online school management software. In versions 2.10.0 and prior, an authenticated time-based SQL injection vulnerability exists in the ieducar/intranet/agenda.php script. An attacker with access to an authenticated session can execute arbitrary SQL command...

  9. CVE-2025-11050 Portabilis i-Educar periodo-lancamento improper authorization

    Published
    MediumCVSS 5.3 EPSS 0.39%

    A flaw has been found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /periodo-lancamento. Executing manipulation can lead to improper authorization. The attack can be executed remotely. The exploit has been published and may be used.

  10. CVE-2025-11049 Portabilis i-Educar unificacao-aluno improper authorization

    Published
    MediumCVSS 5.3 EPSS 0.39%

    A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /unificacao-aluno. Performing manipulation results in improper authorization. Remote exploitation of the attack is possible. The exploit is now public...

  11. CVE-2025-11048 Portabilis i-Educar consulta-dispensas improper authorization

    Published
    MediumCVSS 5.3 EPSS 0.39%

    A security vulnerability has been detected in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /consulta-dispensas. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been d...

  12. CVE-2025-11047 Portabilis i-Educar aluno improper authorization

    Published
    MediumCVSS 5.3 EPSS 0.39%

    A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file /module/Api/aluno. This manipulation of the argument aluno_id causes improper authorization. The attack may be initiated remotely. The exploit has been made available to...

  13. CVE-2025-10846 Portabilis i-Educar edit sql injection

    Published
    MediumCVSS 5.3 EPSS 0.44%

    A vulnerability was determined in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /module/ComponenteCurricular/edit. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has b...

  14. CVE-2025-10845 Portabilis i-Educar view sql injection

    Published
    MediumCVSS 5.3 EPSS 0.44%

    A vulnerability was found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/ComponenteCurricular/view. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could b...

  15. CVE-2025-10844 Portabilis i-Educar aluno sql injection

    Published
    MediumCVSS 5.3 EPSS 0.44%

    A vulnerability has been found in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /module/Cadastro/aluno. The manipulation of the argument is leads to sql injection. Remote exploitation of the attack is possible. The exploit has be...

  16. CVE-2025-10608 Portabilis i-Educar enrollment-history access control

    Published
    MediumCVSS 5.3 EPSS 0.39%

    A vulnerability was detected in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /enrollment-history/. Performing manipulation results in improper access controls. The attack is possible to be carried out remotely. The exploit is now public...

  17. CVE-2025-10607 Portabilis i-Educar diarioApi information disclosure

    Published
    MediumCVSS 5.3 EPSS 0.41%

    A security vulnerability has been detected in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /module/Avaliacao/diarioApi. Such manipulation leads to information disclosure. The attack can be executed remotely. The exploit has been disclosed publicly a...

  19. CVE-2025-10605 Portabilis i-Educar agenda_preferencias.php cross site scripting

    Published
    MediumCVSS 5.3 EPSS 0.40%

    A security flaw has been discovered in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /agenda_preferencias.php. The manipulation of the argument tipoacao results in cross site scripting. The attack may be launched remotely. The exploit has bee...

  21. CVE-2025-10590 Portabilis i-Educar educar_usuario_det.php cross site scripting

    Published
    MediumCVSS 5.3 EPSS 0.34%

    A security flaw has been discovered in Portabilis i-Educar up to 2.10. The impacted element is an unknown function of the file /intranet/educar_usuario_det.php. The manipulation of the argument ref_pessoa results in cross site scripting. The attack can be executed remotely. The e...

  23. CVE-2025-10373 Portabilis i-Educar educar_turma_tipo_cad.php cross site scripting

    Published
    MediumCVSS 5.1 EPSS 0.25%

    A security vulnerability has been detected in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /intranet/educar_turma_tipo_cad.php. Such manipulation of the argument nm_tipo leads to cross site scripting. It is possible to launch the attack...

  24. CVE-2025-10372 Portabilis i-Educar educar_modulo_cad.php cross site scripting

    Published
    MediumCVSS 5.1 EPSS 0.24%

    A weakness has been identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /intranet/educar_modulo_cad.php. This manipulation of the argument nm_tipo/descricao causes cross site scripting. It is possible to initiate the attack remotely. The expl...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.