CVE-2022-29303

🗓️ 12 May 2022 15:17:16Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 456 Views🌐 WEB

SolarView Compact ver.6.00 command injection vulnerability via conf_mail.ph

Reporter	Title	Published	Views	Family All 23
0day.today	SolarView Compact 6.0 - OS Command Injection Vulnerability	17 May 202200:00	–	zdt
GithubExploit	Exploit for Command Injection in Contec Solarview_Compact_Firmware	1 Aug 202316:24	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Contec Sv-Cpt-Mc310_Firmware	31 May 202222:55	–	githubexploit
ATTACKERKB	CVE-2022-29303	12 May 202200:00	–	attackerkb
BDU FSTEC	The vulnerability of the conf_mail.php component in the microprogramming software for solar power generation, data display, and storage of SolarView Compact allows a hacker to execute arbitrary commands.	3 Oct 202300:00	–	bdu_fstec
Circl	CVE-2022-29303	12 May 202220:42	–	circl
CISA KEV Catalog	SolarView Compact Command Injection Vulnerability	13 Jul 202300:00	–	cisa_kev
CISA	CISA Adds Two Known Vulnerabilities to Catalog	13 Jul 202312:00	–	cisa
CNNVD	Contec SolarView Compact 操作系统命令注入漏洞	12 May 202200:00	–	cnnvd
Check Point Advisories	SolarView Compact Command Injection (CVE-2022-29303)	13 Jun 202200:00	–	checkpoint_advisories

NVD

Node

AND

Source	Link
drive	www.drive.google.com/drive/folders/1tGr-WExbpfvhRg31XCoaZOFLWyt3r60g
packetstormsecurity	www.packetstormsecurity.com/files/167183/SolarView-Compact-6.0-Command-Injection.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
mail_address	request body	/conf_mail.php	OS command injection vulnerability in SolarView Compact via conf_mail.php (CVE-2022-29303)	CWE-78
button	request body	/conf_mail.php	OS command injection vulnerability in SolarView Compact via conf_mail.php (CVE-2022-29303)	CWE-78

17 Jun 2026 04:39Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8

CVSS 210

EPSS0.99922

SSVC