PT-2025-31899 · Portabilis · Portabilis I-Educar
Karina Gante
+1
·
Published
2025-08-05
·
Updated
2025-08-05
·
CVE-2025-8543
Karina Gante
+1
·
Published
2025-08-05
·
Updated
2025-08-05
·
CVE-2025-8543
3.3
Low
Base vector | Vector | AV:N/AC:L/Au:M/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions:
Portabilis i-Educar version 2.10
Description:
A problematic issue exists in Portabilis i-Educar 2.10. The vulnerability is related to cross site scripting, resulting from manipulation of the `nm raca` argument in the `/intranet/educar raca cad.php` file. This issue can be exploited remotely. The exploit has been publicly disclosed.
Recommendations:
As a temporary workaround, consider restricting access to the `/intranet/educar raca cad.php` file until a fix is available.
Sanitize the `nm raca` input parameter to prevent the injection of malicious scripts.
Exploit
Fix
XSS
Code Injection