CVE-2025-7112: Portabilis i-Educar Function Management Module educar_funcao_det.php cross site scripting
A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown processing of the file /intranet/educarfuncaodet.php?codfuncao=COD&refcodinstituicao=COD of the component Function Management Module. The manipulation of the argument Função leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7112?
CVE-2025-7112 is classified as problematic due to its impact on the Function Management Module in Portabilis i-Educar.
How do I fix CVE-2025-7112?
To fix CVE-2025-7112, ensure that you update Portabilis i-Educar to the latest version that addresses this vulnerability.
What components are affected by CVE-2025-7112?
CVE-2025-7112 affects the File Management Component, specifically the intranet function handling in Portabilis i-Educar.
What does CVE-2025-7112 allow an attacker to do?
CVE-2025-7112 may allow an attacker to manipulate certain parameters, potentially leading to unauthorized access or functionality in the application.
Is there a known exploit for CVE-2025-7112?
As of now, information on a public exploit for CVE-2025-7112 is not available, but the vulnerability should be taken seriously.