VULNERABILITY INTELLIGENCE

CVE-2025-10011

CVSS score6.3 MEDIUM

EPSS probability0.51%

CISA KEVNot currently listed

Published2025-09-05

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

A weakness has been identified in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /module/TabelaArredondamento/edit. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.

Weakness classification

cna@vuldb.com: CWE-74
nvd@nist.gov: CWE-74

Primary references

cna@vuldb.com — Exploit, Third Party Advisory
cna@vuldb.com — Broken Link
cna@vuldb.com — Permissions Required, VDB Entry
cna@vuldb.com — Third Party Advisory, VDB Entry
cna@vuldb.com — Third Party Advisory, VDB Entry
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Broken Link
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Third Party Advisory, VDB Entry