CVE-2025-10011: Portabilis i-Educar edit sql injection
A weakness has been identified in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /module/TabelaArredondamento/edit. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10011?
CVE-2025-10011 is considered a critical vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-10011?
To fix CVE-2025-10011, upgrade Portabilis i-Educar to version 2.11 or later to mitigate the vulnerability.
What type of vulnerability is CVE-2025-10011?
CVE-2025-10011 is classified as a SQL injection vulnerability.
Which versions of Portabilis i-Educar are affected by CVE-2025-10011?
Portabilis i-Educar versions up to 2.10 are affected by CVE-2025-10011.
Can CVE-2025-10011 be exploited remotely?
Yes, CVE-2025-10011 can be exploited remotely, allowing attackers to execute SQL injection from a distance.