Filtered by vendor Ventem Subscriptions
Filtered by product E-school Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-8322 1 Ventem 1 E-school 2025-07-31 8.8 High
The e-School from Ventem has a Missing Authorization vulnerability, allowing remote attackers with regular privilege to access administrator functions, including creating, modifying, and deleting accounts. They can even escalate any account to system administrator privilege.
CVE-2025-8323 1 Ventem 1 E-school 2025-07-31 8.8 High
The e-School from Ventem has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.