Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

i-Educar — Vulnerabilities & Security Advisories 92

All 92 CVE vulnerabilities found in i-Educar, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerabilities for the i-Educar product, classified under the weakness type "Insufficient session invalidation" and tagged with the identifier CWE-613. It collects known security flaws affecting i-Educar, covering advisories published between 2015 and 2023, including issues related to authentication bypass and data exposure. Readers can track vendor-specific security notices, analyze patterns within this weakness class, and review the complete vulnerability history for this educational platform. The entries summarize each defect, its impact, and recommended mitigations without listing individual CVE identifiers, focusing instead on systemic risks in session management and access control mechanisms. This collection helps security teams assess the stability of i-Educar’s authentication infrastructure and identify recurring themes in its security posture over time.

Vendor: Portábilis

CVE ID Title CVSS Severity Published
CVE-2025-10013 Portabilis i-Educar exportacao-para-o-seb access control CWE-284 6.3 Medium 2025-09-05
CVE-2025-10012 Portabilis i-Educar educar_historico_escolar_lst.php sql injection CWE-89 6.3 Medium 2025-09-05
CVE-2025-10011 Portabilis i-Educar edit sql injection CWE-89 6.3 Medium 2025-09-05
CVE-2025-9760 Portabilis i-Educar Matricula API matricula improper authorization CWE-285 6.3 Medium 2025-09-01
CVE-2025-9738 Portabilis i-Educar educar_tipo_ensino_cad.php cross site scripting CWE-79 3.5 Low 2025-08-31
CVE-2025-9724 Portabilis i-Educar educar_nivel_ensino_cad.php cross site scripting CWE-79 3.5 Low 2025-08-31
CVE-2025-9723 Portabilis i-Educar educar_tipo_regime_cad.php cross site scripting CWE-79 3.5 Low 2025-08-31
CVE-2025-9722 Portabilis i-Educar educar_tipo_ocorrencia_disciplinar_cad.php cross site scripting CWE-79 3.5 Low 2025-08-31
CVE-2025-9721 Portabilis i-Educar edit cross site scripting CWE-79 3.5 Low 2025-08-31
CVE-2025-9720 Portabilis i-Educar Cadastrar tabela de arredondamento edit cross site scripting CWE-79 3.5 Low 2025-08-31
CVE-2025-9687 Portabilis i-Educar processamentoApi improper authorization CWE-285 6.3 Medium 2025-08-30
CVE-2025-9686 Portabilis i-Educar Listagem de áreas de conhecimento edit sql injection CWE-89 6.3 Medium 2025-08-30
CVE-2025-9685 Portabilis i-Educar Listagem de áreas de conhecimento view sql injection CWE-89 6.3 Medium 2025-08-30
CVE-2025-9684 Portabilis i-Educar Formula de Cálculo de Média edit sql injection CWE-89 6.3 Medium 2025-08-30
CVE-2025-9653 Portabilis i-Educar Cadastrar projeto educar_projeto_cad.php cross site scripting CWE-79 3.5 Low 2025-08-29
CVE-2025-9652 Portabilis i-Educar Cadastrar tipo de transferência educar_transferencia_tipo_cad.php cross site scripting CWE-79 3.5 Low 2025-08-29
CVE-2025-9609 Portabilis i-Educar consulta improper authorization CWE-285 6.3 Medium 2025-08-29
CVE-2025-9608 Portabilis i-Educar Formula de Cálculo de Média view sql injection CWE-89 6.3 Medium 2025-08-29
CVE-2025-9607 Portabilis i-Educar Tabelas de Arredondamento view sql injection CWE-89 6.3 Medium 2025-08-29
CVE-2025-9606 Portabilis i-Educar agenda_preferencias.php sql injection CWE-89 6.3 Medium 2025-08-29
CVE-2025-9532 Portabilis i-Educar view sql injection CWE-89 6.3 Medium 2025-08-27
CVE-2025-9531 Portabilis i-Educar Agenda agenda.php sql injection CWE-89 6.3 Medium 2025-08-27
CVE-2025-9236 Portabilis i-Educar Tipos de usuàrio educar_tipo_usuario_lst.php sql injection CWE-89 6.3 Medium 2025-08-20
CVE-2025-8918 Portabilis i-Educar Editar educar_instituicao_cad.php cross site scripting CWE-79 2.4 Low 2025-08-13
CVE-2025-8790 Portabilis i-Educar API Endpoint pessoa improper authorization CWE-285 4.3 Medium 2025-08-10
CVE-2025-8789 Portabilis i-Educar API Endpoint Diario authorization CWE-639 4.3 Medium 2025-08-10
CVE-2025-8785 Portabilis i-Educar educar_usuario_lst.php cross site scripting CWE-79 3.5 Low 2025-08-09
CVE-2025-8784 Portabilis i-Educar Cadastrar Vínculo funcionario_vinculo_cad.php cross site scripting CWE-79 3.5 Low 2025-08-09
CVE-2025-8545 Portabilis i-Educar educar_motivo_afastamento_cad.php cross site scripting CWE-79 2.4 Low 2025-08-05
CVE-2025-8544 Portabilis i-Educar edit cross site scripting CWE-79 2.4 Low 2025-08-05

All 92 known CVE vulnerabilities affecting i-Educar with full Chinese analysis, references, and POCs where available.