CVE-2025-10846 : faille élevée portabilis i-educar (CVSS 8.8)

A vulnerability was determined in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /module/ComponenteCurricular/edit. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Sévérité

Élevée (CVSS 8.8)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

23 sept. 2025

Dernière mise à jour

17 juin 2026

• portabilis i-educar

• Fiche CVE-2025-10846 sur le NVD (NIST)
• karinagante.github.io/cve-2025-10846/
• karinagante.github.io/cve-2025-10846/
• vuldb.com/
• vuldb.com/
• vuldb.com/