Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Ventem Clear all filters
TI-2025-07619 CVE-2025-8323 · GHSA-97cw-x668-xww6

Ventem｜e-School - Arbitrary File Upload

Priority MEDIUM 41

The e-School from Ventem has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0069 Published 2025-07-30 No fix listed CWE-434
TI-2025-07618 CVE-2025-8322 · GHSA-x2wv-cv4x-66p6

Ventem｜e-School - Missing Authorization

Priority MEDIUM 40

The e-School from Ventem has a Missing Authorization vulnerability, allowing remote attackers with regular privilege to access administrator functions, including creating, modifying, and deleting accounts.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00436 Published 2025-07-30 No fix listed CWE-862