Portabilis vulnerabilities
106 CVEs and advisories name Portabilis as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-4355Portabilis i-Educar Endpoint educar_servidor_curso_lst.php cross site scripting
- CVE-2026-2064Portabilis i-Educar User Data meusdadod.php cross site scripting
- CVE-2026-2015Portabilis i-Educar Final Status Import FinalStatusImportService.php improper authorization
- CVE-2025-9638i-Educar 2.10.0 - Stored Cross-Site Scripting (XSS) in admin panel
- CVE-2025-65022i-Educar Authenticated Time-based SQL Injection in `agenda.php`
- CVE-2025-65023i-Educar Authenticated Time-based SQL Injection in `funcionario_vinculo_cad.php`
- CVE-2025-65024i-Educar Authenticated Time-based SQL Injection in `agenda_admin_cad.php`
- CVE-2025-11554Portabilis i-Educar User Type AccessLevelController.php insecure inherited permissions
- CVE-2025-11050Portabilis i-Educar periodo-lancamento improper authorization
- CVE-2025-11049Portabilis i-Educar unificacao-aluno improper authorization
- CVE-2025-11048Portabilis i-Educar consulta-dispensas improper authorization
- CVE-2025-11047Portabilis i-Educar aluno improper authorization
- CVE-2025-10846Portabilis i-Educar edit sql injection
- CVE-2025-10845Portabilis i-Educar view sql injection
- CVE-2025-10844Portabilis i-Educar aluno sql injection
- CVE-2025-10608Portabilis i-Educar enrollment-history access control
- CVE-2025-10607Portabilis i-Educar diarioApi information disclosure
- CVE-2025-10606Portabilis i-Educar ConfiguracaoMovimentoGeral cross site scripting
- CVE-2025-10605Portabilis i-Educar agenda_preferencias.php cross site scripting
- CVE-2025-10591Portabilis i-Educar Editar Função educar_funcao_cad.php cross site scripting
- CVE-2025-10590Portabilis i-Educar educar_usuario_det.php cross site scripting
- CVE-2025-10584Portabilis i-Educar educar_calendario_anotacao_cad.php cross site scripting
- CVE-2025-10373Portabilis i-Educar educar_turma_tipo_cad.php cross site scripting
- CVE-2025-10372Portabilis i-Educar educar_modulo_cad.php cross site scripting
- CVE-2025-10099Portabilis i-Educar Editar usuário educar_usuario_cad.php cross site scripting
- CVE-2025-10074Portabilis i-Educar tipos cross site scripting
- CVE-2025-10073Portabilis i-Educar turma improper authorization
- CVE-2025-10072Portabilis i-Educar enturmar access control
- CVE-2025-10071Portabilis i-Educar cancelar-enturmacao-em-lote access control
- CVE-2025-10070Portabilis i-Educar enturmacao-em-lote access control