CVE-2017-7621 Cross Site Scripting Vulnerability in core-eMLi in AuroMeera Technometrix Pvt. Ltd. eMLi V1.0 allows an Attacker to send malicious code, generally in the form of a browser-side script, to a different....
MediumCVSS 6.1
EPSS 0.67%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross Site Scripting Vulnerability in core-eMLi in AuroMeera Technometrix Pvt. Ltd. eMLi V1.0 allows an Attacker to send malicious code, generally in the form of a browser-side script, to a different end user via the page parameter to code/student_portal/home.php. The affected versions are eMLi School Management 1.0, eMLi College Campus Management 1.0, and eMLi University Management 1.0.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| auromeera emli | = 1.0 | No fix listed |
References
- sudoat.blogspot.in exploit third-party-advisory