CVE-2024-48325 | Portabilis i-Educar 2.8.0 getDocuments instituicao_id sql injection

CVE-2024-48325 | Portabilis i-Educar 2.8.0 getDocuments instituicao_id sql injection

A vulnerability, which was classified as critical, has been found in Portabilis i-Educar 2.8.0. This issue affects the function getDocuments of the file /module/Api/InstituicaoDocumentacao?oper=get&resource=getDocuments&instituicao_id. The manipulation of the argument instituicao_id leads to sql injection. The identification of this vulnerability is CVE-2024-48325. The attack may be initiated remotely. There is no exploit available.