Medium severity6.3NVD Advisory· Published Aug 30, 2025· Updated Apr 29, 2026
CVE-2025-9685
CVE-2025-9685
Description
A vulnerability was identified in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /module/AreaConhecimento/view of the component Listagem de áreas de conhecimento Page. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:portabilis:i-educar:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:portabilis:i-educar:*:*:*:*:*:*:*:*range: <=2.10
- (no CPE)range: <=2.10
Patches
Vulnerability mechanics
References
5- github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-9685.mdnvdExploitThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- github.com/marcelomulder/CVE/blob/main/i-educar/SQL%20Injection%20(Blind%20Time-Based)%20Vulnerability%20in%20%60id%60%20Parameter%20on%20%60.module.AreaConhecimento.view%60%20Endpoint.mdnvdBroken Link
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.