portabilis i-educar

Published Atomicorp research notes for CVEs affecting portabilis i-educar where WAF protections were observed during testing or engineering review.

These notes are not intended to represent the full set of vulnerabilities mitigated by Atomicorp products and should not be interpreted as a coverage matrix, certification list, or census of protected CVEs.

Atomicorp WAF protections are primarily designed around attack techniques and exploit behaviors rather than individual vulnerability identifiers. A published research note documents a positive research finding related to that CVE. If a CVE is absent from these notes, no conclusion should be drawn about protection status.

CVEVulnerabilityCVSSSeverityRules Observed
CVE-2025-10012Portabilis i-Educar educar_historico_escolar_lst.php sql injection2.1 (v4.0)Low340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572
CVE-2025-10590Portabilis i-Educar educar_usuario_det.php cross site scripting2.1 (v4.0)Low333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2025-10605Portabilis i-Educar agenda_preferencias.php cross site scripting2.1 (v4.0)Low333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2025-10844Portabilis i-Educar aluno sql injection2.1 (v4.0)Low340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572
CVE-2025-10845Portabilis i-Educar view sql injection2.1 (v4.0)Low340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572
CVE-2025-10846Portabilis i-Educar edit sql injection2.1 (v4.0)Low340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572
CVE-2025-9236Portabilis i-Educar Tipos de usuàrio educar_tipo_usuario_lst.php sql injection2.1 (v4.0)Low340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572
CVE-2025-9531Portabilis i-Educar Agenda agenda.php sql injection2.1 (v4.0)Low340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572
CVE-2025-9606Portabilis i-Educar agenda_preferencias.php sql injection2.1 (v4.0)Low340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572
CVE-2025-9607Portabilis i-Educar Tabelas de Arredondamento view sql injection2.1 (v4.0)Low340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572
CVE-2025-9608Portabilis i-Educar Formula de Cálculo de Média view sql injection2.1 (v4.0)Low340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572
CVE-2025-9684Portabilis i-Educar Formula de Cálculo de Média edit sql injection2.1 (v4.0)Low340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572
CVE-2025-9685Portabilis i-Educar Listagem de áreas de conhecimento view sql injection2.1 (v4.0)Low340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572
CVE-2025-9686Portabilis i-Educar Listagem de áreas de conhecimento edit sql injection2.1 (v4.0)Low340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341145 , 360147 , 360148 , 380026 , 380122 , 390572
CVE-2025-10074Portabilis i-Educar tipos cross site scripting2.0 (v4.0)Low333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2025-10584Portabilis i-Educar educar_calendario_anotacao_cad.php cross site scripting2.0 (v4.0)Low333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2025-10591Portabilis i-Educar Editar Função educar_funcao_cad.php cross site scripting2.0 (v4.0)Low333140 , 333141 , 340087 , 340095 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2025-9652Portabilis i-Educar Cadastrar tipo de transferência educar_transferencia_tipo_cad.php cross site scripting2.0 (v4.0)Low333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2025-9653Portabilis i-Educar Cadastrar projeto educar_projeto_cad.php cross site scripting2.0 (v4.0)Low333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755
CVE-2025-9721Portabilis i-Educar edit cross site scripting2.0 (v4.0)Low333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2025-9722Portabilis i-Educar educar_tipo_ocorrencia_disciplinar_cad.php cross site scripting2.0 (v4.0)Low333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2025-9723Portabilis i-Educar educar_tipo_regime_cad.php cross site scripting2.0 (v4.0)Low333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2025-9738Portabilis i-Educar educar_tipo_ensino_cad.php cross site scripting2.0 (v4.0)Low333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2025-10099Portabilis i-Educar Editar usuário educar_usuario_cad.php cross site scripting1.9 (v4.0)Low333140 , 333141 , 340087 , 340099 , 340147 , 340148 , 341099 , 341256 , 341266 , 342259 , 346755
CVE-2025-8538Portabilis i-Educar novo cross site scripting1.9 (v4.0)Low333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755
CVE-2025-8539Portabilis i-Educar public_distrito_cad.php cross site scripting1.9 (v4.0)Low333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148