e-School vulnerabilities

2 known vulnerabilities in e-School from Ventem. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  e-School: Unrestricted Upload of File with Dangerous Type

  CVE-2025-8323Jul 30, 2025Ventem

  The e-School from Ventem has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

• 8.8 High severity

  e-School: Missing Authorization

  CVE-2025-8322Jul 30, 2025Ventem

  The e-School from Ventem has a Missing Authorization vulnerability, allowing remote attackers with regular privilege to access administrator functions, including creating, modifying, and deleting accounts. They can even escalate any account to system administr