VULNERABILITY INTELLIGENCE

CVE-2025-9607

CVSS score6.3 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2025-08-29
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

A flaw has been found in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /module/TabelaArredondamento/view of the component Tabelas de Arredondamento Page. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.

Weakness classification

  • cna@vuldb.com: CWE-74

Primary references