SQL Injection

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

1. Portabilis i-Educar 2.8.0 is vulnerable to SQL Injection in the "getDocuments" function of the "InstituicaoDocumentacaoController" class. The "instituicao_id" parameter in "/modul…CVE-2024-48325Portabilis · CVSS 8.1 · 1.0% likely

   CWE-89

2. Authenticated SQL Injection in i-EducarCVE-2024-45059portabilis · CVSS 8.8 · 0.7% likely

   CWE-89

3. Portabilis i-Educar edit sql injectionCVE-2025-10011Portabilis · CVSS 6.3 · 0.5% likely

   CWE-89

4. Portabilis i-Educar edit sql injectionCVE-2025-10846Portabilis · CVSS 6.3 · 0.4% likely

   CWE-89

5. Portabilis i-Educar view sql injectionCVE-2025-10845Portabilis · CVSS 6.3 · 0.4% likely

   CWE-89

6. Portabilis i-Educar aluno sql injectionCVE-2025-10844Portabilis · CVSS 6.3 · 0.4% likely

   CWE-89

7. i-Educar Authenticated Time-based SQL Injection in `agenda_admin_cad.php`CVE-2025-65024portabilis · CVSS 7.2 · 0.4% likely

   CWE-89

8. i-Educar Authenticated Time-based SQL Injection in `funcionario_vinculo_cad.php`CVE-2025-65023portabilis · CVSS 7.2 · 0.4% likely

   CWE-89

9. Portabilis i-Educar Tipos de usuàrio educar_tipo_usuario_lst.php sql injectionCVE-2025-9236Portabilis · CVSS 6.3 · 0.4% likely

   CWE-89

10. Portabilis i-Educar view sql injectionCVE-2025-9532Portabilis · CVSS 6.3 · 0.4% likely

    CWE-89

11. Portabilis i-Educar Agenda agenda.php sql injectionCVE-2025-9531Portabilis · CVSS 6.3 · 0.4% likely

    CWE-89

12. Portabilis i-Educar Listagem de áreas de conhecimento edit sql injectionCVE-2025-9686Portabilis · CVSS 6.3 · 0.4% likely

    CWE-89

13. Portabilis i-Educar Listagem de áreas de conhecimento view sql injectionCVE-2025-9685Portabilis · CVSS 6.3 · 0.4% likely

    CWE-89

14. Portabilis i-Educar Formula de Cálculo de Média edit sql injectionCVE-2025-9684Portabilis · CVSS 6.3 · 0.4% likely

    CWE-89

15. Portabilis i-Educar Formula de Cálculo de Média view sql injectionCVE-2025-9608Portabilis · CVSS 6.3 · 0.4% likely

    CWE-89

16. Portabilis i-Educar Tabelas de Arredondamento view sql injectionCVE-2025-9607Portabilis · CVSS 6.3 · 0.4% likely

    CWE-89

17. Portabilis i-Educar educar_historico_escolar_lst.php sql injectionCVE-2025-10012Portabilis · CVSS 6.3 · 0.4% likely

    CWE-89

18. Portabilis i-Educar agenda_preferencias.php sql injectionCVE-2025-9606Portabilis · CVSS 6.3 · 0.4% likely

    CWE-89

19. i-Educar Authenticated Time-based SQL Injection in `agenda.php`CVE-2025-65022portabilis · CVSS 7.2 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.