Description
GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access system files and execute malicious scripts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Geovision | GeoVision Geowebserver | <= 5.3.3 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site Scripting http/cves/2021/CVE-2021-47795.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
References
- ExploitDB-50211 exploit
- GeoVision Cyber Security Page product
- VulnCheck Advisory: GeoVision Geowebserver 5.3.3 - Local FIle Inclusion third-party-advisory