CVE-2025-9685: Portabilis i-Educar Listagem de áreas de conhecimento view sql injection
A vulnerability was identified in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /module/AreaConhecimento/view of the component Listagem de áreas de conhecimento Page. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9685?
CVE-2025-9685 is classified as a high severity vulnerability due to its potential for SQL injection exploitation.
How do I fix CVE-2025-9685?
To fix CVE-2025-9685, you should update Portabilis i-Educar to version 2.11 or later where the vulnerability has been addressed.
What components are affected by CVE-2025-9685?
CVE-2025-9685 affects the Listagem de áreas de conhecimento Page within the file /module/AreaConhecimento/view.
What kind of attack is associated with CVE-2025-9685?
CVE-2025-9685 is associated with SQL injection attacks that could be executed through manipulation of the argument ID.
Is CVE-2025-9685 present in earlier versions of the software?
Yes, CVE-2025-9685 affects all versions of Portabilis i-Educar up to and including version 2.10.