admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-05-06 02:31:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add Geowebserver 5.3.3 Arbitrary File Read

Browse Source
This commit is contained in:
xiaoheihei1107 2021-09-10 14:39:59 +08:00 committed by GitHub
parent 8a4091a8b8
commit 8aa199011a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
Geowebserver/5_3_3_Arbitrary_File_Read/README.md Normal file
View File

@ -0,0 +1,9 @@
# Geowebserver 5.3.3 Arbitrary File Read
GEOVISION GEOWEBSERVER less than 5.3.3 are vulnerable to several XSS ,HTML Injection ,Local File Include ,XML Injection ,Code execution vectors. The application fails to properly sanitize user requests. This allows injection of HTML code and XSS ,client side exploitation, including session theft.
FOFA **query rule**: [app="Geowebserver"](https://fofa.so/result?qbase64=YXBwPSJHZW93ZWJzZXJ2ZXIi)
# Demo
![Geowebserver_5_3_3_Arbitrary_File_Read](Geowebserver_5_3_3_Arbitrary_File_Read.gif)