What’s Vulnerable › Vulnerabilities

CVE-2021-47795: GeoVision Geowebserver 5.3.3 - Local FIle Inclusion

• Severity: medium (CVSS 6.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-01-16 · updated 2026-06-17
• Weakness: CWE-22

Description

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access system files and execute malicious scripts.

Affected products

• GeoVision Geowebserver: through 5.3.3

References

• https://www.exploit-db.com/exploits/50211
• https://www.geovision.com.tw/cyber_security.php
• https://www.vulncheck.com/advisories/geovision-geowebserver-local-file-inclusion

Get alerted when CVE-2021-47795 or the next vulnerability affects your stack