CVE-2025-9236 - Portabilis i-Educar Tipos de usuàrio educar_tipo_usuario_lst.php sql injection

Back Back to CVE browser

MEDIUM

Portabilis i-Educar Tipos de usuàrio educar_tipo_usuario_lst.php sql injection

Published Aug 20, 2025

5.3

MEDIUM

CVSS 4.0

EPSS 0.39%

Description

A vulnerability has been found in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet/educar_tipo_usuario_lst.php of the component Tipos de usuàrio Page. Such manipulation of the argument nm_tipo/descrição leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. Upgrading to version 2.12 mitigates this issue. Upgrading the affected component is advised. The vendor confirms: "The reported attack vector was tested against the corrected code, and the previously described SQL Injection behavior could no longer be reproduced."

Affected products

Vendor Portabilis Product i-Educar Default
n/a
- Version
  2.0
  Status
  affected
  Constraints
  -
- Version
  2.1
  Status
  affected
  Constraints
  -
- Version
  2.10
  Status
  affected
  Constraints
  -
- Version
  2.2
  Status
  affected
  Constraints
  -
- Version
  2.3
  Status
  affected
  Constraints
  -
- Version
  2.4
  Status
  affected
  Constraints
  -
- Version
  2.5
  Status
  affected
  Constraints
  -
- Version
  2.6
  Status
  affected
  Constraints
  -
- Version
  2.7
  Status
  affected
  Constraints
  -
- Version
  2.8
  Status
  affected
  Constraints
  -
- Version
  2.9
  Status
  affected
  Constraints
  -
- Version
  2.12
  Status
  unaffected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Portabilis

i-Educar

n/a

Version	Status	Constraints
2.0	affected	-
2.1	affected	-
2.10	affected	-
2.2	affected	-
2.3	affected	-
2.4	affected	-
2.5	affected	-
2.6	affected	-
2.7	affected	-
2.8	affected	-
2.9	affected	-
2.12	unaffected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-89

SQL Injection

References (8)

https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-9236.md
relatedExploitThird Party Advisory
https://github.com/marcelomulder/CVE/blob/main/i-educar/SQL%20Injection%20(Blind%20Time-Based)%20Vulnerability%20in%20nm_tipo%20Parameter%20on%20educar_tipo_usuario_lst.php%20Endpoint.md#poc
broken-linkexploitBroken Link
https://github.com/portabilis/i-educar/tree/2.12
patch
https://vuldb.com/cve/CVE-2025-9236
third-party-advisory
https://vuldb.com/submit/631370
third-party-advisory
https://vuldb.com/submit/638555
third-party-advisory
https://vuldb.com/vuln/320769
vdb-entrytechnical-description
https://vuldb.com/vuln/320769/cti
signaturepermissions-required

Link	Providers	Tags
https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-9236.md		relatedExploitThird Party Advisory
https://github.com/marcelomulder/CVE/blob/main/i-educar/SQL%20Injection%20(Blind%20Time-Based)%20Vulnerability%20in%20nm_tipo%20Parameter%20on%20educar_tipo_usuario_lst.php%20Endpoint.md#poc		broken-linkexploitBroken Link
https://github.com/portabilis/i-educar/tree/2.12		patch
https://vuldb.com/cve/CVE-2025-9236		third-party-advisory
https://vuldb.com/submit/631370		third-party-advisory
https://vuldb.com/submit/638555		third-party-advisory
https://vuldb.com/vuln/320769		vdb-entrytechnical-description
https://vuldb.com/vuln/320769/cti		signaturepermissions-required