GCVE - cpe:2.3:a:portabilis:i-educar:2.9.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:portabilis:i-educar:2.9.0:*:*:*:*:*:*:*

part: a version: 2.9.0 update: *

Vendor	Portabilis (`3ad0129f-523a-5bbd-ad68-3ed5611fd12b`)
Product	I Educar (`0c45357c-1509-5e69-be21-f7484ca4efa6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/portabilis/i-educar`	purl2cpe	2026-06-01 10:14:44.122626

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-8509`	vulnerable	2026-06-08 07:45:20.662434	Portabilis i-Educar educar_servidor_cad.php cross site scripting LOW (3.5) A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /intranet/educar_servidor_cad.php. The manipulation of the argument matricula leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-08-03T12:32:04.725Z Updated: 2025-08-04T16:51:23.266Z Open on db.gcve.eu Reference links https://vuldb.com/?id.318608 https://vuldb.com/?ctiid.318608 https://vuldb.com/?submit.618679 https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-8509.md https://github.com/marcelomulder/CVE/blob/main/i-educar/Stored%20XSS%20educar_servidor_cad.php%20parameter%20matricula.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8508`	vulnerable	2026-06-08 07:45:20.661948	Portabilis i-Educar educar_avaliacao_desempenho_cad.php cross site scripting LOW (3.5) A vulnerability was found in Portabilis i-Educar 2.9. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /intranet/educar_avaliacao_desempenho_cad.php. The manipulation of the argument titulo_avaliacao/descricao leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-08-03T10:32:05.100Z Updated: 2025-08-04T17:23:35.814Z Open on db.gcve.eu Reference links https://vuldb.com/?id.318607 https://vuldb.com/?ctiid.318607 https://vuldb.com/?submit.618678 https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-8508.md https://github.com/marcelomulder/CVE/blob/main/i-educar/Stored%20XSS%20educar_avaliacao_desempenho_cad.php%20parameters%20titulo_avaliacao%20and%20descricao.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8507`	vulnerable	2026-06-08 07:45:20.661447	Portabilis i-Educar educar_funcao_lst.php cross site scripting LOW (3.5) A vulnerability was found in Portabilis i-Educar 2.9. It has been classified as problematic. Affected is an unknown function of the file /intranet/educar_funcao_lst.php. The manipulation of the argument nm_funcao/abreviatura leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-08-03T10:02:05.615Z Updated: 2025-08-04T17:30:25.581Z Open on db.gcve.eu Reference links https://vuldb.com/?id.318606 https://vuldb.com/?ctiid.318606 https://vuldb.com/?submit.618677 https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-8507.md https://github.com/marcelomulder/CVE/blob/main/i-educar/Reflected%20XXS%20educar_funcao_lst.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8370`	vulnerable	2026-06-08 07:45:20.060935	Portabilis i-Educar educar_escolaridade_lst.php cross site scripting MEDIUM (4.3) A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9. Affected is an unknown function of the file /intranet/educar_escolaridade_lst.php. The manipulation of the argument descricao leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-07-31T06:32:05.832Z Updated: 2025-07-31T17:44:41.791Z Open on db.gcve.eu Reference links https://vuldb.com/?id.318342 https://vuldb.com/?ctiid.318342 https://vuldb.com/?submit.618676 https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-8370.md https://github.com/marcelomulder/CVE/blob/main/i-educar/Reflected%20XXS%20educar_escolaridade_lst.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8369`	vulnerable	2026-06-08 07:45:20.060458	Portabilis i-Educar educar_avaliacao_desempenho_lst.php cross site scripting MEDIUM (4.3) A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9. This issue affects some unknown processing of the file /intranet/educar_avaliacao_desempenho_lst.php. The manipulation of the argument titulo_avaliacao leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-07-31T06:02:06.065Z Updated: 2025-07-31T17:51:19.332Z Open on db.gcve.eu Reference links https://vuldb.com/?id.318341 https://vuldb.com/?ctiid.318341 https://vuldb.com/?submit.618675 https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-8369.md https://github.com/marcelomulder/CVE/blob/main/i-educar/Reflected%20XXS%20educar_avaliacao_desempenho_lst.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8368`	vulnerable	2026-06-08 07:45:20.060092	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8367`	vulnerable	2026-06-08 07:45:20.059719	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-8366`	vulnerable	2026-06-08 07:45:20.059212	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7869`	vulnerable	2026-06-08 07:45:18.427283	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7867`	vulnerable	2026-06-08 07:45:18.417587	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7866`	vulnerable	2026-06-08 07:45:18.417086	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7113`	vulnerable	2026-06-08 07:43:18.019693	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7112`	vulnerable	2026-06-08 07:43:18.019336	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7111`	vulnerable	2026-06-08 07:43:18.018758	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7110`	vulnerable	2026-06-08 07:43:18.018364	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7109`	vulnerable	2026-06-08 07:43:18.017778	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-55651`	vulnerable	2026-06-08 06:54:17.159878	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.