PT-2025-35175
CVE-2025-9606
·
Published
2025-08-29
·
Updated
2026-09-15
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Portabilis i-Educar versions prior to 2.11
Description
A SQL injection issue exists in an unknown functionality of the file
/intranet/agenda preferencias.php. Manipulation of the cod agenda argument can trigger the issue. The attack can be initiated remotely, and the exploit is publicly available.Recommendations
Update to version 2.11 or later.
As a temporary workaround, restrict access to the
/intranet/agenda preferencias.php file.
Sanitize the cod agenda argument to prevent SQL injection.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾