CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

247 matches found

SolarView Compact < 6.00 - Directory Traversal

SolarView Compact before version 6.00 is vulnerable to directory traversal via the file parameter in downloader.php. An unauthenticated attacker can read arbitrary files from the system by using path traversal sequences with a null byte bypass to access sensitive files such as /etc/passwd. id:...

7.5CVSS7.2AI score0.02885EPSS

Exploits1References2

Nuclei•added 2026/06/16 7:13 a.m.•25 views

SolarView Compact 6.00 - OS Command Injection

SolarView Compact 6.00 was discovered to contain a command injection vulnerability, attackers can execute commands by bypassing internal restrictions through downloader.php. id: CVE-2023-23333 info: name: SolarView Compact 6.00 - OS Command Injection author: Mr-xn severity: critical description: ...

9.8CVSS8.5AI score0.99273EPSS

Exploits9References5

Nuclei•added 2026/02/04 7:0 a.m.•23 views

SolarView Compact 6.00 - 'pow' Cross-Site Scripting

SolarView Compact version 6.00 contains a cross-site scripting vulnerability in the 'pow' parameter to SolarSlideSub.php. id: CVE-2022-29301 info: name: SolarView Compact 6.00 - 'pow' Cross-Site Scripting author: For3stCo1d severity: high description: | SolarView Compact version 6.00 contains a...

6.2AI score

Exploits3References4

RedhatCVE•added 2026/01/09 12:39 p.m.•12 views

CVE-2023-29919

SolarView Compact = 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted...

9.8CVSS6.7AI score0.60221EPSS

Exploits1References1

RedhatCVE•added 2026/01/09 12:29 p.m.•7 views

CVE-2023-40924

SolarView Compact 6.00 is vulnerable to Directory Traversal...

7.5CVSS6.8AI score0.02885EPSS

Exploits1References1

RedhatCVE•added 2026/01/09 10:39 a.m.•8 views

CVE-2022-35239

The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verification vulnerability when uploading files. If this vulnerability is exploited, arbitrary PHP code may be executed if a remote authenticated...

8.8CVSS7.2AI score0.01218EPSS

Exploits0References1