Portabilis i-Educar 2.10 /educar_aluno_lst.php ref_cod_matricula କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ

Dogoggorri kan akka ସମସ୍ୟାଜନକ jedhamuun ramadame Portabilis i-Educar 2.10 keessatti argameera. Miidhamni argame is hojii hin beekamne faayilii /educar_aluno_lst.php keessa. Wanti jijjiirame irratti ref_cod_matricula galtee "><img%20src=x%20onerror=alert(%27CVE-Hunters%27)> waliin gara କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ geessa. Rakkoo ibsuuf CWE yoo fayyadamte gara CWE-79 si geessa. Odeeffannoon kun yeroo 07/30/2025 maxxanfameera kan maxxansiise Natan Morette (@nmmorette) waliin CVE-Hunters akka Vulnerability Report (GitHub). Odeeffannoon kun buufachuuf github.com irratti argama. Dogoggorri kun CVE-2025-8346 jedhamee waamama. Weerara fageenya irraa jalqabuu ni danda'ama. Ibsa teeknikaa ni jira. Waan dabalataa ta’een, meeshaa balaa kana fayyadamuuf ni jira. Qorannoo miidhaa (exploit) uummataaf ifa taasifameera, kanaafis fayyadamuu ni danda'ama. Ammas, gatii exploit might be approx. USD $0-$5k yeroo ammaa irratti argamuu danda'a. ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ ta’uu isaa ibsameera. Exploit github.com irraa buufachuun ni danda'ama. Akka 0-daytti, gatiin isaa daldala dhoksaa keessatti $0-$5k akka ta'e tilmaamameera. If you want to get best quality of vulnerability data, you may have to visit VulDB.

5 ଆଡାପ୍ଟେସନ୍ · 106 ପଏଣ୍ଟ

ଫିଲ୍ଡସୃଷ୍ଟି ହୋଇଛି
07/30/2025 12:37 PM		ଅଦ୍ୟତନ 1/4
07/30/2025 03:43 PM		ଅଦ୍ୟତନ 2/4
07/30/2025 03:46 PM		ଅଦ୍ୟତନ 3/4
07/31/2025 06:38 AM		ଅଦ୍ୟତନ 4/4
07/31/2025 01:26 PM
software_vendorPortabilisPortabilisPortabilisPortabilisPortabilis
software_namei-Educari-Educari-Educari-Educari-Educar
software_version2.102.102.102.102.10
software_file/educar_aluno_lst.php/educar_aluno_lst.php/educar_aluno_lst.php/educar_aluno_lst.php/educar_aluno_lst.php
software_argumentref_cod_matricularef_cod_matricularef_cod_matricularef_cod_matricularef_cod_matricula
vulnerability_cweCWE-79 (କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ)CWE-79 (କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ)CWE-79 (କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ)CWE-79 (କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ)CWE-79 (କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ)
vulnerability_risk11111
cvss3_vuldb_avNNNNN
cvss3_vuldb_acLLLLL
cvss3_vuldb_prNNNNN
cvss3_vuldb_uiRRRRR
cvss3_vuldb_sUUUUU
cvss3_vuldb_cNNNNN
cvss3_vuldb_iLLLLL
cvss3_vuldb_aNNNNN
cvss3_vuldb_ePPPPP
cvss3_vuldb_rcRRRRR
advisory_urlhttps://github.com/CVE-Hunters/CVE/blob/main/i-educar/Reflected%20Cross-Site%20Scripting%20(XSS)%20in%20educar_aluno_lst.php%20via%20ref_cod_matricula%20Parameter.mdhttps://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8346.mdhttps://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8346.mdhttps://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8346.mdhttps://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8346.md
exploit_availability11111
exploit_publicity11111
exploit_urlhttps://github.com/CVE-Hunters/CVE/blob/main/i-educar/Reflected%20Cross-Site%20Scripting%20(XSS)%20in%20educar_aluno_lst.php%20via%20ref_cod_matricula%20Parameter.mdhttps://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8346.mdhttps://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8346.mdhttps://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8346.mdhttps://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8346.md
source_cveCVE-2025-8346CVE-2025-8346CVE-2025-8346CVE-2025-8346CVE-2025-8346
cna_responsibleVulDBVulDBVulDBVulDBVulDB
response_summaryThe vendor was contacted early about this disclosure but did not respond in any way.The vendor was contacted early about this disclosure but did not respond in any way.The vendor was contacted early about this disclosure but did not respond in any way.The vendor was contacted early about this disclosure but did not respond in any way.The vendor was contacted early about this disclosure but did not respond in any way.
cvss2_vuldb_avNNNNN
cvss2_vuldb_acLLLLL
cvss2_vuldb_auNNNNN
cvss2_vuldb_ciNNNNN
cvss2_vuldb_iiPPPPP
cvss2_vuldb_aiNNNNN
cvss2_vuldb_ePOCPOCPOCPOCPOC
cvss2_vuldb_rcURURURURUR
cvss4_vuldb_avNNNNN
cvss4_vuldb_acLLLLL
cvss4_vuldb_prNNNNN
cvss4_vuldb_uiPPPPP
cvss4_vuldb_vcNNNNN
cvss4_vuldb_viLLLLL
cvss4_vuldb_vaNNNNN
cvss4_vuldb_ePPPPP
cvss2_vuldb_rlNDNDNDNDND
cvss3_vuldb_rlXXXXX
cvss4_vuldb_atNNNNN
cvss4_vuldb_scNNNNN
cvss4_vuldb_siNNNNN
cvss4_vuldb_saNNNNN
cvss2_vuldb_basescore5.05.05.05.05.0
cvss2_vuldb_tempscore4.34.34.34.34.3
cvss3_vuldb_basescore4.34.34.34.34.3
cvss3_vuldb_tempscore3.93.93.93.93.9
cvss3_meta_basescore4.34.34.34.34.3
cvss3_meta_tempscore3.93.93.94.14.1
cvss4_vuldb_bscore5.35.35.35.35.3
cvss4_vuldb_btscore2.12.12.12.12.1
advisory_date1753826400 (07/30/2025)1753826400 (07/30/2025)1753826400 (07/30/2025)1753826400 (07/30/2025)1753826400 (07/30/2025)
price_0day$0-$5k$0-$5k$0-$5k$0-$5k$0-$5k
developer_nickname@nmmorette@nmmorette@nmmorette@nmmorette
person_websitehttps://nmmorette.github.iohttps://nmmorette.github.iohttps://nmmorette.github.iohttps://nmmorette.github.io
advisory_locationGitHubGitHubGitHubGitHub
advisory_disputed0000
company_nameCVE-HuntersCVE-HuntersCVE-HuntersCVE-Hunters
company_websitehttps://www.cvehunters.comhttps://www.cvehunters.comhttps://www.cvehunters.comhttps://www.cvehunters.com
software_typeLearning Management SoftwareLearning Management SoftwareLearning Management SoftwareLearning Management Software
software_componentref_cod_matricula
input_value"><img%20src=x%20onerror=alert(%27CVE-Hunters%27)>"><img%20src=x%20onerror=alert(%27CVE-Hunters%27)>"><img%20src=x%20onerror=alert(%27CVE-Hunters%27)>"><img%20src=x%20onerror=alert(%27CVE-Hunters%27)>
developer_nameNatan MoretteNatan MoretteNatan MoretteNatan Morette
person_nickname@nmmorette@nmmorette@nmmorette@nmmorette
person_nameNatan MoretteNatan MoretteNatan MoretteNatan Morette
advisory_typeVulnerability ReportVulnerability ReportVulnerability ReportVulnerability Report
company_nameCVE-HuntersCVE-HuntersCVE-HuntersCVE-Hunters
company_websitehttps://cvehunters.comhttps://cvehunters.comhttps://cvehunters.comhttps://cvehunters.com
developer_websitehttps://nmmorette.github.iohttps://nmmorette.github.iohttps://nmmorette.github.iohttps://nmmorette.github.io
cve_nvd_summaryA vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue is some unknown functionality of the file /educar_aluno_lst.php. The manipulation of the argument ref_cod_matricula with the input "><img%20src=x%20onerror=alert(%27CVE-Hunters%27)> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue is some unknown functionality of the file /educar_aluno_lst.php. The manipulation of the argument ref_cod_matricula with the input "><img%20src=x%20onerror=alert(%27CVE-Hunters%27)> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
cvss4_cna_avNN
cvss4_cna_acLL
cvss4_cna_atNN
cvss4_cna_prNN
cvss4_cna_uiPP
cvss4_cna_vcNN
cvss4_cna_viLL
cvss4_cna_vaNN
cvss4_cna_scNN
cvss4_cna_siNN
cvss4_cna_saNN
cvss4_cna_bscore5.35.3
cvss3_cna_avNN
cvss3_cna_acLL
cvss3_cna_prNN
cvss3_cna_uiRR
cvss3_cna_sUU
cvss3_cna_cNN
cvss3_cna_iLL
cvss3_cna_aNN
cvss3_cna_basescore4.34.3
cvss2_cna_avNN
cvss2_cna_acLL
cvss2_cna_auNN
cvss2_cna_ciNN
cvss2_cna_iiPP
cvss2_cna_aiNN
cvss2_cna_basescore55
cve_nvd_summaryesSe ha encontrado una vulnerabilidad clasificada como problemática en Portabilis i-Educar 2.10. Este problema afecta a una funcionalidad desconocida del archivo /educar_aluno_lst.php. La manipulación del argumento ref_cod_matricula con la entrada "&gt; provoca cross-site scripting. El ataque puede ejecutarse en remoto. Se ha hecho público el exploit y puede que sea utilizado. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió.

◂ ପଛକୁସମୀକ୍ଷାଆହୁରି ଦୂରରେ ▸

Might our Artificial Intelligence support you?

Check our Alexa App!