CNNVD-202508-3673 Information

Aug 30, 2025 cve

CNNVD ID

CNNVD-202508-3673

CVE-2025-9685

CNNVD Published: 2025-08-30

Description (Chinese)

i-Educar是Portábilis开源的一个免费教育软件。 i-Educar 2.10及之前版本存在安全漏洞，该漏洞源于文件/module/AreaConhecimento/view中参数ID的错误操作导致SQL注入。

Description (English)

i-Educar is a free education software from Portábilis. i-Educar 2.10 and previous versions contain a security loophole, which stems from the error of the parameter ID in document/module/AreaConhecimento/view resulting in the injection of SQL.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Portábilis

Published

2025-08-30

Last Modified

2026-02-24

References

https://vuldb.com/?submit.638576 https://vuldb.com/?id.321897 https://vuldb.com/?ctiid.321897 https://github.com/marcelomulder/CVE/blob/main/i-educar/SQL%20Injection%20(Blind%20Time-Based)%20Vulnerability%20in%20%60id%60%20Parameter%20on%20%60.module.AreaConhecimento.view%60%20Endpoint.md https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-9685.md https://access.redhat.com/security/cve/cve-2025-9685 https://nvd.nist.gov/vuln/detail/CVE-2025-9685

Share on: