CVE-2025-9236

A vulnerability has been found in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet/educar_tipo_usuario_lst.php of the component Tipos de usuàrio Page. Such manipulation of the argument nm_tipo/descrição leads to sql injection. The attack may be performed from a remote location. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-74
• CWE-89

• https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-9236.mdExploit, Third Party Advisory
• https://github.com/marcelomulder/CVE/blob/main/i-educar/SQL%20Injection%20(Blind%20Time-Based)%20Vulnerability%20in%20nm_tipo%20Parameter%20on%20educar_tipo_usuario_lst.php%20Endpoint.md#pocBroken Link
• https://vuldb.com/?ctiid.320769Permissions Required, VDB Entry
• https://vuldb.com/?id.320769Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.631370Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.638555Third Party Advisory, VDB Entry

Published

Aug 20, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-9230Issue summary: An application trying to decrypt CMS messages…7.5
• CVE-2025-9231Issue summary: A timing side-channel which could potentially…6.5
• CVE-2025-9232Issue summary: An application using the OpenSSL HTTP client …5.9
• CVE-2025-9233A security vulnerability has been detected in Scada-LTS up t…5.4
• CVE-2025-9234A vulnerability was detected in Scada-LTS up to 2.7.8.1. The…5.4
• CVE-2025-9235A flaw has been found in Scada-LTS up to 2.7.8.1. The impact…5.4
• CVE-2025-9237A vulnerability was found in CodeAstro Ecommerce Website 1.0…5.4
• CVE-2025-9238A vulnerability was determined in Swatadru Exam-Seating-Arra…7.3
• CVE-2025-9239A vulnerability was identified in elunez eladmin up to 2.7. …6.3
• CVE-2025-9240A security flaw has been discovered in elunez eladmin up to …4.3
• CVE-2025-9241A weakness has been identified in elunez eladmin up to 2.7. …7.5
• CVE-2025-9242An Out-of-bounds Write vulnerability in the WatchGuard Firew…9.8