CVE-2017-7258

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-03-29 · updated 2026-06-17
Weakness: CWE-22

Description

HTTP Exploit in eMLi Portal in AuroMeera Technometrix Pvt. Ltd. eMLi allows an Attacker to View Restricted Information or (even more seriously) execute powerful commands on the web server which can lead to a full compromise of the system via Directory Path Traversal, as demonstrated by reading core-emli/Storage. The affected versions are eMLi School Management 1.0, eMLi College Campus Management 1.0, and eMLi University Management 1.0.

Affected products

Auromeera Emli: 1.0

References

http://www.securityfocus.com/bid/97255
https://sudoat.blogspot.in/2017/03/path-traversal-vulnerability-in-emli.html
http://www.securityfocus.com/bid/97255
https://sudoat.blogspot.in/2017/03/path-traversal-vulnerability-in-emli.html

Get alerted when CVE-2017-7258 or the next vulnerability affects your stack