GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site Scripting

GeoVision GeoWebServer 5.3.3 and prior is vulnerable to local file inclusion and cross-site scripting due to improper sanitization of user-supplied input in the WebStrings.srf endpoint. An unauthenticated attacker can read arbitrary files from the server or inject malicious scripts. id:...

GeoWebServer Detector Panel - Detect

GeoWebServer Detector panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """GeoWebServer Detector panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GeoWebServer Detector Panel - Detect',...

GeoVision Geowebserver 5.3.3 - Local File Inclusion Detection

GeoVision Geowebserver 5.3.3 allows remote unauthenticated attackers to disclose the content of locally stored files via local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """GeoVision Geowebserver 5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient cla...

GeoVision Geowebserver 5.3.3 - Cross-Site Scripting Detection

GeoVision Geowebserver 5.3.3 and prior versions are vulnerable to several cross-site scripting / HTML injection / local file inclusion / XML injection / code execution vectors because the application fails to properly sanitize user requests. !/usr/bin/env python3 -- coding: utf-8 -- """GeoVision...

VulnCheck KEV: CVE-2021-47795

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access...

CVE-2021-47795

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access...

CVE-2021-47795

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access...

GeoVision GeoWebServer path traversal vulnerability

GeoVision GeoWebServer is a web monitoring and management platform developed by GeoVision Corporation. Version 5.3.3 of GeoVision GeoWebServer contains a path traversal vulnerability. This vulnerability arises due to improper input sanitization, and it may lead to local file inclusion, cross-site...

CVE-2021-47795: Improper Limitation of a Pathname to a Restricted Directory

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access...

CVE-2021-47795 GeoVision Geowebserver 5.3.3 - Local FIle Inclusion

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access...

CVE-2021-47795 GeoVision Geowebserver 5.3.3 - Local FIle Inclusion

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access...

EUVD-2022-48908

Malicious code in bioql PyPI...

CVE-2022-46070

GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path...

CVE-2022-46070

GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path...

CVE-2022-46070

GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path...

Design/Logic Flaw

GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path...

CVE-2022-46070

GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path...

CVE-2022-46070

Geovision GV-ASManager version V6.0.1.0 contains a Local File Inclusion (LFI) vulnerability within the GeoWebServer component. The flaw is triggered via the Path parameter. This vulnerability could allow an attacker to include and execute malicious code or access unauthorized files. As a workarou...

CVE-2022-46070

GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path...

GV-ASManager Security Vulnerability

Geovision GV-ASManager is Geovision's network access control solution for small businesses and multinational corporations with facilities worldwide. A security vulnerability exists in GV-ASManager version V6.0.1.0 that stems from a file inclusion vulnerability in GeoWebServer...