GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site Scripting

GeoVision GeoWebServer 5.3.3 and prior is vulnerable to local file inclusion and cross-site scripting due to improper sanitization of user-supplied input in the WebStrings.srf endpoint. An unauthenticated attacker can read arbitrary files from the server or inject malicious scripts. id:...

GeoVision Geowebserver 5.3.3 - Local File Inclusion Detection

GeoVision Geowebserver 5.3.3 allows remote unauthenticated attackers to disclose the content of locally stored files via local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """GeoVision Geowebserver 5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient cla...

VulnCheck KEV: CVE-2021-47795

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access...

CVE-2021-47795

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access...

CVE-2021-47795

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access...

GeoVision GeoWebServer path traversal vulnerability

GeoVision GeoWebServer is a web monitoring and management platform developed by GeoVision Corporation. Version 5.3.3 of GeoVision GeoWebServer contains a path traversal vulnerability. This vulnerability arises due to improper input sanitization, and it may lead to local file inclusion, cross-site...

CVE-2021-47795: Improper Limitation of a Pathname to a Restricted Directory

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access...

CVE-2021-47795 GeoVision Geowebserver 5.3.3 - Local FIle Inclusion

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access...

CVE-2021-47795 GeoVision Geowebserver 5.3.3 - Local FIle Inclusion

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access...

EUVD-2022-48908

Malicious code in bioql PyPI...

CVE-2022-46070

GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path...

CVE-2022-46070

GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path...

CVE-2022-46070

GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path...

Design/Logic Flaw

GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path...

CVE-2022-46070: Improper Control of Generation of Code

GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path...

CVE-2022-46070

GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path...

CVE-2022-46070

GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path...

CVE-2022-46070

Geovision GV-ASManager version V6.0.1.0 contains a Local File Inclusion (LFI) vulnerability within the GeoWebServer component. The flaw is triggered via the Path parameter. This vulnerability could allow an attacker to include and execute malicious code or access unauthorized files. As a workarou...

GV-ASManager Security Vulnerability

Geovision GV-ASManager is Geovision's network access control solution for small businesses and multinational corporations with facilities worldwide. A security vulnerability exists in GV-ASManager version V6.0.1.0 that stems from a file inclusion vulnerability in GeoWebServer...

GeoVision Geowebserver 5.3.3 - LFI / XSS / HHI / RCE Vulnerabilities

Exploit Title: GeoVision Geowebserver 5.3.3 - LFI / XSS / HHI / RCE DynamicDNS Network to find: DIPMAP.COM / GVDIP.COM Exploit Author: Ken 's1ngular1ty' Pyle Vendor Homepage: https://www.geovision.com.tw/cybersecurity.php Version: test HTTP/1.1 Absolute exploitation of the LFI: POST...