CVE-2025-9686 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A security flaw has been discovered in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /module/AreaConhecimento/edit of t…
Medium CVSS: 5.3

CVE-2025-9686

A security flaw has been discovered in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /module/AreaConhecimento/edit of the component Listagem de áreas de conhecimento Page. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.
Vendor
Portabilis
Product
I-educar
CWE
CWE-74
Yayın Tarihi
2025-08-30 12:15:33
Güncelleme
2025-09-04 16:50:19
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 I-educar MEDIUM Portabilis 2025

Referanslar

https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-9686.md https://github.com/marcelomulder/CVE/blob/main/i-educar/SQL%20Injection%20(Blind%20Time-Based)%20Vulnerability%20in%20%60id%60%20Parameter%20on%20%60.module.AreaConhecimento.edit%60%20Endpoint.md https://vuldb.com/?ctiid.321898 https://vuldb.com/?id.321898 https://vuldb.com/?submit.638577 https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-9686.md