I-Educar
2025
- CVE-2025-8790: Broken Object Level Authorization (BOLA) in pessoa API Endpoint Allows Unauthorized Access to Other Users Data Aug 10
- CVE-2025-8789: Broken Function Level Authorization (BFLA) allows unauthorized users to alter student grades Aug 10
- CVE-2025-8510: Reflected Cross-Site Scripting (XSS) in educar_matricula_lst.php via ref_cod_aluno Parameter Aug 3
- CVE-2025-8365: Multiples Cross-Site Scripting (XSS) Stored in endpoint atendidos_cad.php Jul 31
- CVE-2025-8346: Cross-Site Scripting (XSS) Reflected endpoint educar_aluno_lst.php via ref_cod_matricula parameter Jul 31