GeoVision Geowebserver 5.3.3 - Local FIle Inclusion
58Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actcvss 8.7epss 2.6%
da publicação à arma
Publicada no NVD15 de jan.
VulnCheck+10d
probabilidade de exploração
2.6%top 16% das CVEs
exploração observada
simVulnCheck
GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access system files and execute malicious scripts.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Geovision · GeoVision Geowebserver