Ventem e-School Arbitrary File Upload Vulnerability Allowing Remote Code Execution

A vulnerability allowing arbitrary file upload has been identified in the e-School platform by Ventem. This issue enables unauthenticated remote attackers to upload and execute web shell backdoors, facilitating arbitrary code execution on the server. The vulnerability arises from insufficient validation of uploaded files, allowing malicious scripts to be executed on the server.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the server, potentially allowing attackers to execute arbitrary commands or scripts with the same privileges as the web server user.

Remediation

Schools using the e-School platform on-premises should contact Ventem to check for available updates. Alternatively, consider restricting access to the campus network only.