admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-05-05 18:27:13 +00:00
Code Issues Packages Projects Releases Wiki Activity
GobyVuls/Geowebserver/5_3_3_Arbitrary_File_Read
History

README.md

Geowebserver 5.3.3 Arbitrary File Read

GEOVISION GEOWEBSERVER less than 5.3.3 are vulnerable to several XSS ,HTML Injection ,Local File Include ,XML Injection ,Code execution vectors. The application fails to properly sanitize user requests. This allows injection of HTML code and XSS ,client side exploitation, including session theft.

FOFA query rule: app="Geowebserver"

Demo

Geowebserver_5_3_3_Arbitrary_File_Read