CVE-2025-65024

i-Educar is free, fully online school management software. In versions 2.10.0 and prior, an authenticated time-based SQL injection vulnerability exists in the ieducar/intranet/agenda_admin_cad.php script. An attacker with access to an authenticated session can execute arbitrary SQL commands against the application's database. This vulnerability is caused by the improper handling of the cod_agenda GET parameter, which is directly concatenated into an SQL query without proper sanitization. This issue has been patched in commit 3e9763a.

• CWE-89

• https://github.com/portabilis/i-educar/commit/3e9763a561b328edaed21a7dc2e0dba0bbbc6e22Patch
• https://github.com/portabilis/i-educar/security/advisories/GHSA-6c8p-xqcv-rghxExploit, Vendor Advisory

Published

Nov 19, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-65019Astro is a web framework. Prior to version 5.15.9, when usin…6.1
• CVE-2025-6502A vulnerability has been found in code-projects Inventory Ma…9.8
• CVE-2025-65020Rallly is an open-source scheduling and collaboration tool. …6.5
• CVE-2025-65021Rallly is an open-source scheduling and collaboration tool. …9.1
• CVE-2025-65022i-Educar is free, fully online school management software. I…7.2
• CVE-2025-65023i-Educar is free, fully online school management software. I…7.2
• CVE-2025-65025esm.sh is a nobuild content delivery network(CDN) for modern…9.8
• CVE-2025-65026esm.sh is a nobuild content delivery network(CDN) for modern…9.6
• CVE-2025-65027RomM (ROM Manager) allows users to scan, enrich, browse and …7.6
• CVE-2025-65028Rallly is an open-source scheduling and collaboration tool. …6.5
• CVE-2025-65029Rallly is an open-source scheduling and collaboration tool. …8.1
• CVE-2025-6503A vulnerability was found in code-projects Inventory Managem…9.8