CVE-2017-7621

Cross Site Scripting Vulnerability in core-eMLi in AuroMeera Technometrix Pvt. Ltd. eMLi V1.0 allows an Attacker to send malicious code, generally in the form of a browser-side script, to a different end user via the page parameter to code/studentportal/home.php. The affected versions are eMLi...

CVE-2017-7258: Improper Limitation of a Pathname to a Restricted Directory

HTTP Exploit in eMLi Portal in AuroMeera Technometrix Pvt. Ltd. eMLi allows an Attacker to View Restricted Information or even more seriously execute powerful commands on the web server which can lead to a full compromise of the system via Directory Path Traversal, as demonstrated by reading...

PT-2017-17617

Name of the Vulnerable Software and Affected Versions eMLi School Management version 1.0 eMLi College Campus Management version 1.0 eMLi University Management version 1.0 Description The issue allows an attacker to view restricted information or execute powerful commands on the web server,...