admin/GobyVuls
1
0 Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2026-10-28 19:40:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add Geowebserver 5.3.3 Arbitrary File Read

Browse Source
This commit is contained in:
xiaoheihei1107 authored and GitHub committed 2021-09-10 14:39:59 +08:00
1 parent 8a4091a8b8
commit 8aa199011a
1 file changed
+9
Download Patch File Download Diff File Expand all files Collapse all files
Geowebserver/5_3_3_Arbitrary_File_Read/README.md
+9
View File
@@ -0,0 +1,9 @@
# Geowebserver 5.3.3 Arbitrary File Read
GEOVISION GEOWEBSERVER less than 5.3.3 are vulnerable to several XSS ,HTML Injection ,Local File Include ,XML Injection ,Code execution vectors. The application fails to properly sanitize user requests. This allows injection of HTML code and XSS ,client side exploitation, including session theft.
FOFA **query rule**: [app="Geowebserver"](https://fofa.so/result?qbase64=YXBwPSJHZW93ZWJzZXJ2ZXIi)
# Demo
![Geowebserver_5_3_3_Arbitrary_File_Read](Geowebserver_5_3_3_Arbitrary_File_Read.gif)