Investigação de Vulnerabilidades em Aplicações Web de Instituição de Ensino

Abstract

This paper presents an investigation of security vulnerabilities identified in web applications used by an educational institution. The study was conducted through reconnaissance, asset validation and vulnerability analysis techniques, using open-source tools such as Subfinder, httpx and WPScan. The objective was to identify exposed assets, technologies in use and known vulnerabilities associated with Common Vulnerabilities and Exposures (CVE). The results indicate the presence of multiple vulnerabilities in WordPress-based applications, including critical flaws with high CVSS scores. The study highlights the importance of continuous vulnerability management, software updates and proactive security practices.