PlatformPlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
medium·Web Vulnerabilities·Updated Aug 2, 2026

GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site Scripting

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsdomain, subdomain, ipv4
CostFree
3.1k
Times Used
continuous scan runs
0
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2021-47795
8.7
CVSShigh
Exploitable remotely over the internet · no authentication required.

GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper input sanitization. Attackers can exploit the WebStrings.srf endpoint by manipulating path traversal and injection parameters to access system files and execute malicious scripts.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
GeoVision Geowebserverby Geovision
<= 5.3.3
Updated Sep 9, 2026View on NVD →
Similar Tools
high
GeoVision GV-SNVR0811 Detection Scanner
→critical
WordPress Simple File List - Path Traversal
→high
Flowise 1.4.3 - Arbitrary File Read
→medium
SAPControl ListConfigFiles - Disclosure
→high
Yonyou YonBIP - Path Traversal
→high
Spring Framework Path Traversal in Functional Web Frameworks
→high
Apache Kafka Client - Arbitrary File Read
→critical
WordPress Madara Theme < 2.2.2.1 - Local File Inclusion
→

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site Scripting CVE-2021-47795 Scanner | S4E