CVE-2025-10373
BaseFortify
Publication date: 2025-09-13
Last updated on: 2026-04-29
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| portabilis | i-educar | to 2.10.0 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
| CWE-94 | The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-10373 is a cross-site scripting (XSS) vulnerability in Portabilis i-Educar versions up to 2.10, specifically in the file /intranet/educar_turma_tipo_cad.php. It occurs because the application does not properly validate or sanitize the nm_tipo parameter, allowing attackers to inject malicious scripts. These scripts can be stored on the server and executed in users' browsers when they visit certain pages, potentially leading to unauthorized actions. [1, 2]
How can this vulnerability impact me? :
This vulnerability can lead to several security impacts including session cookie theft (which can enable session hijacking), downloading and installing malware, browser hijacking, credential theft, unauthorized access to sensitive information, website defacement, user misdirection, and damage to the business's reputation. The malicious scripts execute automatically in users' browsers when they access affected pages. [2]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by checking for the presence of the vulnerable endpoint `/intranet/educar_turma_tipo_cad.php` in your Portabilis i-Educar installation. You can use Google dorking with queries like `inurl:intranet/educar_turma_tipo_cad.php` to identify potentially vulnerable targets. Additionally, you can test the vulnerability by attempting to inject a known XSS payload into the `nm_tipo` parameter, such as `"><img src=x onerror=alert('CVE-Hunters')>`, and then observe if the payload executes when accessing the related page `/intranet/educar_turma_tipo_lst.php`. For local testing, you might use curl or similar tools to send crafted requests to the vulnerable endpoint and check the response or behavior. [1, 2]
What immediate steps should I take to mitigate this vulnerability?
No known mitigations or countermeasures have been published for this vulnerability. The suggested immediate step is to replace the affected component or upgrade to a version of Portabilis i-Educar that is not vulnerable, if available. Additionally, as a temporary measure, you could restrict access to the vulnerable endpoint `/intranet/educar_turma_tipo_cad.php` or implement web application firewall (WAF) rules to block malicious input targeting the `nm_tipo` parameter. Monitoring and alerting on suspicious activity related to this endpoint is also recommended. [1]