CVE-2025-10844: Portabilis i-Educar aluno sql injection
A vulnerability has been found in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /module/Cadastro/aluno. The manipulation of the argument is leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10844?
CVE-2025-10844 is classified as a critical severity vulnerability due to its potential for remote SQL injection.
How do I fix CVE-2025-10844?
To fix CVE-2025-10844, update Portabilis i-Educar to a version beyond 2.10 where the vulnerability is patched.
What is the nature of the vulnerability in CVE-2025-10844?
CVE-2025-10844 involves SQL injection that can be exploited through manipulation of input in the /module/Cadastro/aluno file.
Can CVE-2025-10844 be exploited remotely?
Yes, CVE-2025-10844 is vulnerable to remote exploitation, allowing attackers to execute SQL queries.
Which versions of Portabilis i-Educar are affected by CVE-2025-10844?
CVE-2025-10844 affects all versions of Portabilis i-Educar up to and including version 2.10.