CVE-2025-8323 HIGH

CVE-2025-8323: Ventem｜e-School - Arbitrary File Upload

Vendor Ventem

Product e-School

Weakness CWE-434 · Unrestricted file upload

Published July 30, 2025

Last update July 30, 2025

View on NVD All CVEs

CVSS base score

8.8/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

The e-School from Ventem has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

Key dates

02Disclosure timeline

July 30, 2025 CVE published

July 30, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-8323 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/434.html

Related vulnerabilities

04Related CVE

CVE-2026-6518 CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.16 - Missing Authorization to Authenticated (Administrator+) Arbitrary File Upload and Remote Code Execution CVE-2025-13827 GrapesJsBuilder File Upload allows all file uploads CVE-2025-3566 veal98 小牛肉 Echo 开源社区系统 uploadMdPic unrestricted upload CVE-2024-5518 itsourcecode Online Discussion Forum change_profile_picture.php unrestricted upload CVE-2026-4536 Acrel Environmental Monitoring Cloud Platform unrestricted upload