Portabilis kayıtları
portabilis üreticisine ait 107 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %13,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')68
- CWE-266 Incorrect Privilege Assignment16
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')14
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5
- CWE-285 Improper Authorization1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
107 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2024-45059İstismar yok | Authenticated SQL Injection in i-Educarportabilis · i-educar · CWE-89 | Yüksek8,8 | — | %0,6 | 28 Ağu 2024 |
32İzleyin | CVE-2024-45058Kavram kanıtı | Privilege escalation in i-Educarportabilis · i-educar · CWE-20 | Yüksek8,1 | — | %1,3 | 28 Ağu 2024 |
32İzleyin | CVE-2024-48325Kavram kanıtı | Portabilis i-Educar 2.8.0 is vulnerable to SQL Injection in the "getDocuments" function of the "InstituicaoDocumentacaoController" class.portabilis · i-educar · CWE-89 | Yüksek8,1 | — | %0,9 | 6 Kas 2024 |
28İzleyin | CVE-2025-65024İstismar yok | i-Educar Authenticated Time-based SQL Injection in `agenda_admin_cad.php`portabilis · i-educar · CWE-89 | Yüksek7,2 | — | %0,4 | 19 Kas 2025 |
28İzleyin | CVE-2025-65023İstismar yok | i-Educar Authenticated Time-based SQL Injection in `funcionario_vinculo_cad.php`portabilis · i-educar · CWE-89 | Yüksek7,2 | — | %0,4 | 19 Kas 2025 |
28İzleyin | CVE-2025-65022İstismar yok | i-Educar Authenticated Time-based SQL Injection in `agenda.php`portabilis · i-educar · CWE-89 | Yüksek7,2 | — | %0,3 | 19 Kas 2025 |
24İzleyin | CVE-2024-45057İstismar yok | Reflected Cross-Site Scripting in i-Educarportabilis · i-educar · CWE-79 | Orta6,1 | — | %0,3 | 28 Ağu 2024 |
21İzleyin | CVE-2024-55239İstismar yok | A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attackerportabilis · i-educar · CWE-79 | Orta5,4 | — | %0,3 | 18 Ara 2024 |
20İzleyin | CVE-2024-12893İstismar yok | Portabilis i-Educar Tipo de Usuário Page 2 cross site scriptingportabilis · i-educar · CWE-79 | Orta5,1 | — | %0,4 | 22 Ara 2024 |
19İzleyin | CVE-2025-9638İstismar yok | i-Educar 2.10.0 - Stored Cross-Site Scripting (XSS) in admin panelportabilis · i-educar · CWE-79 | Orta4,8 | — | %0,2 | 9 Ara 2025 |
11İzleyin | CVE-2025-9109İstismar yok | Portabilis i-Diario Password Recovery Endpoint email observable response discrepancyportabilis · i-diario · CWE-203 | Düşük2,9 | — | %0,4 | 18 Ağu 2025 |
8İzleyin | CVE-2025-8369İstismar yok | Portabilis i-Educar educar_avaliacao_desempenho_lst.php cross site scriptingportabilis · i-educar · CWE-79 | Düşük2,1 | — | %0,5 | 31 Tem 2025 |
8İzleyin | CVE-2025-8370İstismar yok | Portabilis i-Educar educar_escolaridade_lst.php cross site scriptingportabilis · i-educar · CWE-79 | Düşük2,1 | — | %0,5 | 31 Tem 2025 |
8İzleyin | CVE-2025-8368İstismar yok | Portabilis i-Educar pesquisa_pessoa_lst.php cross site scriptingportabilis · i-educar · CWE-79 | Düşük2,1 | — | %0,5 | 31 Tem 2025 |
8İzleyin | CVE-2025-10011İstismar yok | Portabilis i-Educar edit sql injectionportabilis · i-educar · CWE-74 | Düşük2,1 | — | %0,5 | 5 Eyl 2025 |
8İzleyin | CVE-2023-5578İstismar yok | Portábilis i-Educar HTTP GET Request agenda_imprimir.php cross site scriptingportabilis · i-educar · CWE-79 | Düşük2,0 | — | %0,4 | 14 Eki 2023 |
8İzleyin | CVE-2025-8366İstismar yok | Portabilis i-Educar educar_servidor_lst.php cross site scriptingportabilis · i-educar · CWE-79 | Düşük2,1 | — | %0,4 | 31 Tem 2025 |
8İzleyin | CVE-2025-8346İstismar yok | Portabilis i-Educar educar_aluno_lst.php cross site scriptingportabilis · i-educar · CWE-79 | Düşük2,1 | — | %0,4 | 30 Tem 2025 |
8İzleyin | CVE-2025-8367İstismar yok | Portabilis i-Educar funcionario_vinculo_lst.php cross site scriptingportabilis · i-educar · CWE-79 | Düşük2,1 | — | %0,4 | 31 Tem 2025 |
8İzleyin | CVE-2025-10846İstismar yok | Portabilis i-Educar edit sql injectionportabilis · i-educar · CWE-74 | Düşük2,1 | — | %0,4 | 23 Eyl 2025 |
8İzleyin | CVE-2025-10844İstismar yok | Portabilis i-Educar aluno sql injectionportabilis · i-educar · CWE-74 | Düşük2,1 | — | %0,4 | 23 Eyl 2025 |
8İzleyin | CVE-2025-10845İstismar yok | Portabilis i-Educar view sql injectionportabilis · i-educar · CWE-74 | Düşük2,1 | — | %0,4 | 23 Eyl 2025 |
8İzleyin | CVE-2025-8789İstismar yok | Portabilis i-Educar API Endpoint Diario authorizationportabilis · i-educar · CWE-285 | Düşük2,1 | — | %0,4 | 9 Ağu 2025 |
8İzleyin | CVE-2025-9107İstismar yok | Portabilis i-Diario search_autocomplete cross site scriptingportabilis · i-diario · CWE-79 | Düşük2,1 | — | %0,4 | 18 Ağu 2025 |
8İzleyin | CVE-2025-9532İstismar yok | Portabilis i-Educar view sql injectionportabilis · i-educar · CWE-74 | Düşük2,1 | — | %0,4 | 27 Ağu 2025 |
- CVE-2024-4505935İzleyin
Authenticated SQL Injection in i-Educar
YüksekCVSS 8,8İstismar yokEPSS %0portabilis · i-educar28 Ağu 2024
- CVE-2024-4505832İzleyin
Privilege escalation in i-Educar
YüksekCVSS 8,1Kavram kanıtıEPSS %1portabilis · i-educar28 Ağu 2024
- CVE-2024-4832532İzleyin
Portabilis i-Educar 2.8.0 is vulnerable to SQL Injection in the "getDocuments" function of the "InstituicaoDocumentacaoController" class.
YüksekCVSS 8,1Kavram kanıtıEPSS %0portabilis · i-educar6 Kas 2024
- CVE-2025-6502428İzleyin
i-Educar Authenticated Time-based SQL Injection in `agenda_admin_cad.php`
YüksekCVSS 7,2İstismar yokEPSS %0portabilis · i-educar19 Kas 2025
- CVE-2025-6502328İzleyin
i-Educar Authenticated Time-based SQL Injection in `funcionario_vinculo_cad.php`
YüksekCVSS 7,2İstismar yokEPSS %0portabilis · i-educar19 Kas 2025
- CVE-2025-6502228İzleyin
i-Educar Authenticated Time-based SQL Injection in `agenda.php`
YüksekCVSS 7,2İstismar yokEPSS %0portabilis · i-educar19 Kas 2025
- CVE-2024-4505724İzleyin
Reflected Cross-Site Scripting in i-Educar
OrtaCVSS 6,1İstismar yokEPSS %0portabilis · i-educar28 Ağu 2024
- CVE-2024-5523921İzleyin
A reflected Cross-Site Scripting vulnerability in the standard documentation upload functionality in Portabilis i-Educar 2.9 allows attacker
OrtaCVSS 5,4İstismar yokEPSS %0portabilis · i-educar18 Ara 2024
- CVE-2024-1289320İzleyin
Portabilis i-Educar Tipo de Usuário Page 2 cross site scripting
OrtaCVSS 5,1İstismar yokEPSS %0portabilis · i-educar22 Ara 2024
- CVE-2025-963819İzleyin
i-Educar 2.10.0 - Stored Cross-Site Scripting (XSS) in admin panel
OrtaCVSS 4,8İstismar yokEPSS %0portabilis · i-educar9 Ara 2025
- CVE-2025-910911İzleyin
Portabilis i-Diario Password Recovery Endpoint email observable response discrepancy
DüşükCVSS 2,9İstismar yokEPSS %0portabilis · i-diario18 Ağu 2025
- CVE-2025-83698İzleyin
Portabilis i-Educar educar_avaliacao_desempenho_lst.php cross site scripting
DüşükCVSS 2,1İstismar yokEPSS %0portabilis · i-educar31 Tem 2025
- CVE-2025-83708İzleyin
Portabilis i-Educar educar_escolaridade_lst.php cross site scripting
DüşükCVSS 2,1İstismar yokEPSS %0portabilis · i-educar31 Tem 2025
- CVE-2025-83688İzleyin
Portabilis i-Educar pesquisa_pessoa_lst.php cross site scripting
DüşükCVSS 2,1İstismar yokEPSS %0portabilis · i-educar31 Tem 2025
- CVE-2025-100118İzleyin
Portabilis i-Educar edit sql injection
DüşükCVSS 2,1İstismar yokEPSS %0portabilis · i-educar5 Eyl 2025
- CVE-2023-55788İzleyin
Portábilis i-Educar HTTP GET Request agenda_imprimir.php cross site scripting
DüşükCVSS 2,0İstismar yokEPSS %0portabilis · i-educar14 Eki 2023
- CVE-2025-83668İzleyin
Portabilis i-Educar educar_servidor_lst.php cross site scripting
DüşükCVSS 2,1İstismar yokEPSS %0portabilis · i-educar31 Tem 2025
- CVE-2025-83468İzleyin
Portabilis i-Educar educar_aluno_lst.php cross site scripting
DüşükCVSS 2,1İstismar yokEPSS %0portabilis · i-educar30 Tem 2025
- CVE-2025-83678İzleyin
Portabilis i-Educar funcionario_vinculo_lst.php cross site scripting
DüşükCVSS 2,1İstismar yokEPSS %0portabilis · i-educar31 Tem 2025
- CVE-2025-108468İzleyin
Portabilis i-Educar edit sql injection
DüşükCVSS 2,1İstismar yokEPSS %0portabilis · i-educar23 Eyl 2025
- CVE-2025-108448İzleyin
Portabilis i-Educar aluno sql injection
DüşükCVSS 2,1İstismar yokEPSS %0portabilis · i-educar23 Eyl 2025
- CVE-2025-108458İzleyin
Portabilis i-Educar view sql injection
DüşükCVSS 2,1İstismar yokEPSS %0portabilis · i-educar23 Eyl 2025
- CVE-2025-87898İzleyin
Portabilis i-Educar API Endpoint Diario authorization
DüşükCVSS 2,1İstismar yokEPSS %0portabilis · i-educar9 Ağu 2025
- CVE-2025-91078İzleyin
Portabilis i-Diario search_autocomplete cross site scripting
DüşükCVSS 2,1İstismar yokEPSS %0portabilis · i-diario18 Ağu 2025
- CVE-2025-95328İzleyin
Portabilis i-Educar view sql injection
DüşükCVSS 2,1İstismar yokEPSS %0portabilis · i-educar27 Ağu 2025