CVE-2025-9532: Portabilis i-Educar view sql injection
A flaw has been found in Portabilis i-Educar up to 2.10. This impacts an unknown function of the file /RegraAvaliacao/view. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9532?
CVE-2025-9532 is considered a critical vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-9532?
To fix CVE-2025-9532, upgrade Portabilis i-Educar to a version higher than 2.10, where the vulnerability has been addressed.
What types of attacks can be executed due to CVE-2025-9532?
CVE-2025-9532 allows an attacker to perform SQL injection attacks by manipulating the argument ID in a specific file.
Which software versions are affected by CVE-2025-9532?
CVE-2025-9532 affects Portabilis i-Educar versions up to, but not including, 2.10.
Can CVE-2025-9532 be exploited remotely?
Yes, CVE-2025-9532 can be exploited remotely, allowing attackers to compromise the system from a distance.