# Portabilis I-Educar


- [CVE-2024-45059](https://insights.sbomify.com/CVE-2024-45059/): Authenticated SQL Injection in i-Educar (high 8.8)
- [CVE-2024-48325](https://insights.sbomify.com/CVE-2024-48325/): SQL injection in n/a (high 8.1)
- [CVE-2024-45058](https://insights.sbomify.com/CVE-2024-45058/): Privilege escalation in i-Educar (high 8.1)
- [CVE-2025-65022](https://insights.sbomify.com/CVE-2025-65022/): i-Educar Authenticated Time-based SQL Injection in `agenda.php` (high 7.2)
- [CVE-2025-65023](https://insights.sbomify.com/CVE-2025-65023/): i-Educar Authenticated Time-based SQL Injection in `funcionario_vinculo_cad.php` (high 7.2)
- [CVE-2025-65024](https://insights.sbomify.com/CVE-2025-65024/): i-Educar Authenticated Time-based SQL Injection in `agenda_admin_cad.php` (high 7.2)
- [CVE-2024-45057](https://insights.sbomify.com/CVE-2024-45057/): Reflected Cross-Site Scripting in i-Educar (medium 6.3)
- [CVE-2024-55239](https://insights.sbomify.com/CVE-2024-55239/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2026-2015](https://insights.sbomify.com/CVE-2026-2015/): Portabilis i-Educar Final Status Import FinalStatusImportService.php improper authorization (medium 5.3)
- [CVE-2025-11554](https://insights.sbomify.com/CVE-2025-11554/): Portabilis i-Educar User Type AccessLevelController.php insecure inherited permissions (medium 5.3)
- [CVE-2025-11049](https://insights.sbomify.com/CVE-2025-11049/): Portabilis i-Educar unificacao-aluno improper authorization (medium 5.3)
- [CVE-2025-11050](https://insights.sbomify.com/CVE-2025-11050/): Portabilis i-Educar periodo-lancamento improper authorization (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/products/portabilis/i-educar/