| शीर्षक | Portabilis i-Educar 2.9.0 Stored Cross Site Scripting |
|---|
| विवरण | Hello team!
A Stored XSS vulnerability was identified in the “Nome” field within the Curricular Components module of i-Educar. An authenticated attacker can inject malicious JavaScript that will be executed each time the component list is accessed.
Vulnerability Type: Stored Cross-Site Scripting (XSS)
Affected Application: i-Educar
Vulnerable Endpoint: /module/ComponenteCurricular/edit?id=ID
Vulnerable Parameter: “Nome” field (stored via /intranet/educar_componente_curricular_lst.php)
PoC Step-by-Step
1 - Authentication: Log in to i-Educar with valid credentials.
2 - Access the "Escola" module: Navigate to: Escola > Cadastro > Componentes Curriculares URL: /intranet/educar_componente_curricular_lst.php
3 - Create or Edit "Componentes curriculares" Entry: Either create a new "Componentes curriculares" or edit an existing one.
4 - Edit Vulnerable Field "Nome": Go to: module/ComponenteCurricular/edit?id=ID image
5 - Insert Payload: In the “Nome” field, insert:
<script>alert('PoC VulDB i-Educar Pacxxx')</script>
6 - Save and Trigger: image
Recommendations & Mitigations
Input Sanitization: Reject or neutralize input containing scripts or HTML.
Output Encoding: Properly encode all user input before rendering in HTML.
Use of XSS Mitigation Libraries: Tools like OWASP Java Encoder, HTMLPurifier, or DOMPurify should be employed. |
|---|
| स्रोत | ⚠️ https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README15.md |
|---|
| उपयोगकर्ता | RaulPACXXX (UID 84502) |
|---|
| सबमिशन | 27/06/2025 02:45 AM (1 वर्ष पहले) |
|---|
| संयम | 06/07/2025 07:41 AM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 315024 [Portabilis i-Educar 2.9.0 Curricular Components edit?id=ID Nome क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|