CVE-2025-8323

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The e-School from Ventem has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published: Jul 30, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-83249.8Zohocorp ManageEngine Analytics Plus versions 6170 and below are vulnerable to Unauthenticated SQL Injection due to the improper filter conf CVE-2025-83258.8The software fails to enforce role-based access controls for certain Gateway API invocations. Users with the 'Internal/Everyone' role can in CVE-2025-83269.8A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file CVE-2025-83279.8A vulnerability classified as critical was found in code-projects Exam Form Submission 1.0. Affected by this vulnerability is an unknown fun CVE-2025-83289.8A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. Affected by this issue is some CVE-2025-83299.8A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. This affects an unknown part of the fi CVE-2025-83309.8A vulnerability has been found in code-projects Vehicle Management 1.0 and classified as critical. This vulnerability affects unknown code o CVE-2025-83319.8A vulnerability was found in code-projects Online Farm System 1.0 and classified as critical. This issue affects some unknown processing of CVE-2025-83329.8A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of th CVE-2025-83339.8A vulnerability was found in code-projects Online Farm System 1.0. It has been declared as critical. Affected by this vulnerability is an un CVE-2025-83349.8A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected by this issue is so CVE-2025-83354.3A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The ma