SolarView Compact 6.00 - (time_begin) Cross-Site Scripting Vulnerability

Exploit Title: SolarView Compact 6.00 - 'timebegin' Cross-Site Scripting XSS Exploit Author: Ahmed Alroky Author Company : AIactive Version: ver.6.00 Vendor home page : https://www.contec.com/ Authentication Required: No CVE : CVE-2022-29299 Tested on: Windows Proof Of Concept:...

SolarView Compact 6.00 Directory Traversal

Exploit Title: SolarView Compact 6.00 - Directory Traversal Date: 2022-05-15 Exploit Author: Ahmed Alroky Author Company : Aiactive Author linkedin profile : https://www.linkedin.com/in/ahmedalroky/ Version: ver.6.00 Vendor home page : https://www.contec.com/ Authentication Required: No CVE :...

SolarView Compact 6.00 - Directory Traversal

Exploit Title: SolarView Compact 6.00 - Directory Traversal Date: 2022-05-15 Exploit Author: Ahmed Alroky Author Company : Aiactive Author linkedin profile : https://www.linkedin.com/in/ahmedalroky/ Version: ver.6.00 Vendor home page : https://www.contec.com/ Authentication Required: No CVE :...

SolarView Compact 6.0 - OS Command Injection

Exploit Title: SolarView Compact 6.0 - OS Command Injection Date: 2022-05-15 Exploit Author: Ahmed Alroky Author Company : AIactive Version: ver.6.00 Vendor home page : https://www.contec.com/ Authentication Required: No CVE : CVE-2022-29303 Tested on: Windows Exploit HTTP Request : POST...

SolarView Compact 6.0 - OS Command Injection Vulnerability

Exploit Title: SolarView Compact 6.0 - OS Command Injection Exploit Author: Ahmed Alroky Author Company : AIactive Version: ver.6.00 Vendor home page : https://www.contec.com/ Authentication Required: No CVE : CVE-2022-29303 Tested on: Windows Exploit HTTP Request : POST /confmail.php HTTP/1.1...

SolarView Compact 6.0 Command Injection

Exploit Title: SolarView Compact 6.0 - OS Command Injection Date: 2022-05-15 Exploit Author: Ahmed Alroky Author Company : AIactive Version: ver.6.00 Vendor home page : https://www.contec.com/ Authentication Required: No CVE : CVE-2022-29303 Tested on: Windows Exploit HTTP Request : POST...

CVE-2022-29298

SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal...

CVE-2022-29298

SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal...

CVE-2022-29303

SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via confmail.php...

CVE-2022-29303

SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via confmail.php...

CVE-2022-29302

SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/SolarFtp.php...

CVE-2022-29302

SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/SolarFtp.php...

CVE-2022-29302

SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/SolarFtp.php...

CVE-2022-29298

SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal...

Directory traversal

SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal...

Command injection

SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via confmail.php...

Design/Logic Flaw

SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/SolarFtp.php...

CVE-2022-29303

SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via confmail.php...

CVE-2022-29303

SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via confmail.php...

CVE-2022-29303

CVE-2022-29303 targets SolarView Compact (CONTEC). Affected: ver.6.00; vulnerability in the web server’s conf_mail.php allows OS command injection due to improper input validation on the send test mail console. Impact per sources: potential remote execution of arbitrary commands with high confide...