GeoVision Geowebserver 5.3.3 - Local FIle Inclusion
58Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actcvss 8.7epss 2.6%
from disclosure to weapon
Published on NVDJan 15
VulnCheck+10d
exploitation probability
2.6%top 16% of all CVEs
observed exploitation
yesVulnCheck
GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access system files and execute malicious scripts.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Geovision · GeoVision Geowebserver