Low
Portabilis i-Educar Listagem de áreas de conhecimento view sql injection
Type: advisorySources: OSV
A vulnerability was identified in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /module/AreaConhecimento/view of the component Listagem de áreas de conhecimento Page. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2025-9685
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 4 Nov 2026, 08:04 UTC · Revision 1
Source evidence
Portabilis i-Educar Listagem de áreas de conhecimento view sql injection
core-osv · Original sourcePublished 30 Aug 2025, 11:02 UTC
A vulnerability was identified in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /module/AreaConhecimento/view of the component Listagem de áreas de conhecimento Page. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
osv:CVE-2025-9685
Complete source record
{
"id": "0b93b85aa7393422d9ad87d81f13f01f65cf632d07f538671093eb7dbfce7bc4",
"url": "https://osv.dev/vulnerability/CVE-2025-9685",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Portabilis i-Educar Listagem de áreas de conhecimento view sql injection",
"summary": "A vulnerability was identified in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /module/AreaConhecimento/view of the component Listagem de áreas de conhecimento Page. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.",
"evidence": "osv:CVE-2025-9685",
"products": [],
"severity": "low",
"structured": {
"id": "CVE-2025-9685",
"aliases": [
"CVE-2025-9685"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/portabilis/i-educar",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "cfb0a5db27ab623cf3f17cd5e0c704bde02cbf07"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:portabilis:i-educar:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "2.10"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"2.10.0",
"2.9.0",
"2.8.0",
"2.8.0-beta",
"2.7.3",
"2.7.2",
"2.7.1",
"2.7.0",
"2.6.8",
"2.6.7",
"2.6.6",
"2.6.5",
"2.6.4",
"2.6.3",
"2.6.2",
"2.6.1",
"2.6.0",
"2.5.4-upgrade",
"2.5.3",
"2.5.2",
"2.5.1",
"2.5.0",
"2.3.10",
"2.3.9",
"2.3.8",
"2.3.7",
"2.3.6",
"2.3.5",
"2.3.4",
"2.3.3",
"2.3.2",
"2.3.1",
"2.3.0",
"2.2.21-upgrade",
"2.2.20",
"2.2.19",
"2.2.18",
"2.2.17",
"2.2.16",
"2.2.15",
"2.2.14",
"2.2.13",
"2.2.12",
"2.2.11",
"2.2.10",
"2.2.9",
"2.2.8",
"2.2.7",
"2.2.6",
"2.2.5",
"2.2.4",
"2.2.3",
"2.2.2",
"2.2.1",
"2.2.0",
"2.1.23-upgrade",
"2.1.21",
"2.1.20",
"2.1.19",
"2.1.18",
"2.1.17",
"2.1.16",
"2.1.15",
"2.1.14",
"2.1.13",
"2.1.12",
"2.1.11",
"2.1.10",
"2.1.9",
"2.1.8",
"2.1.7",
"2.1.6",
"2.1.5",
"2.1.4",
"2.1.3",
"2.1.2",
"2.1.1",
"2.1.0",
"2.0.11",
"2.0.10",
"2.0.9",
"2.0.8.1",
"2.0.8",
"2.0.7",
"2.0.6",
"2.0.5",
"2.0.4",
"2.0.3",
"2.0.2",
"2.0.1",
"2.0.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9685.json"
}
}
],
"modified": "2026-10-28T02:30:33.597424748Z",
"provider": "osv",
"references": [
"https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-9685.md",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9685.json",
"https://nvd.nist.gov/vuln/detail/CVE-2025-9685",
"https://vuldb.com/?id.321897",
"https://vuldb.com/?submit.638576",
"https://vuldb.com/?ctiid.321897",
"https://github.com/marcelomulder/CVE/blob/main/i-educar/SQL%20Injection%20(Blind%20Time-Based)%20Vulnerability%20in%20%60id%60%20Parameter%20on%20%60.module.AreaConhecimento.view%60%20Endpoint.md"
],
"provider_metadata": {
"cwe_ids": [
"CWE-74",
"CWE-89"
],
"cna_assigner": "VulDB",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"introduced": "2.0"
},
{
"last_affected": "2.0"
},
{
"introduced": "2.1"
},
{
"last_affected": "2.1"
},
{
"introduced": "2.2"
},
{
"last_affected": "2.2"
},
{
"introduced": "2.3"
},
{
"last_affected": "2.3"
},
{
"introduced": "2.4"
},
{
"last_affected": "2.4"
},
{
"introduced": "2.5"
},
{
"last_affected": "2.5"
},
{
"introduced": "2.6"
},
{
"last_affected": "2.6"
},
{
"introduced": "2.7"
},
{
"last_affected": "2.7"
},
{
"introduced": "2.8"
},
{
"last_affected": "2.8"
},
{
"introduced": "2.9"
},
{
"last_affected": "2.9"
},
{
"introduced": "2.10"
},
{
"last_affected": "2.10"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
}
]
}
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9685.json"
}
},
"related_cves": [
{
"value": "CVE-2025-9685",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 501036,
"published_at": "2025-08-30T11:02:06.212+00:00"
}