CVE-2025-10845: Portabilis i-Educar view sql injection
A vulnerability was found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/ComponenteCurricular/view. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10845?
CVE-2025-10845 is classified as a high-severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2025-10845?
To fix CVE-2025-10845, upgrade Portabilis i-Educar to the latest version beyond 2.10.
What type of vulnerability is CVE-2025-10845?
CVE-2025-10845 is an SQL injection vulnerability affecting the Portabilis i-Educar application.
Can CVE-2025-10845 be exploited remotely?
Yes, CVE-2025-10845 can be exploited remotely through manipulated input to the vulnerable parameter.
What components are affected by CVE-2025-10845?
CVE-2025-10845 affects the /module/ComponenteCurricular/view file in Portabilis i-Educar versions up to 2.10.