CVE-2023-46509

An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component...

Contec SolarView Compact Security Vulnerability

Contec SolarView Compact is an application system from Contec Japan. It provides a photovoltaic power measurement system. A security vulnerability exists in Contec SolarView Compact v.6.0 and earlier versions, which originated from a vulnerability that allows attackers to execute arbitrary code v...

PT-2023-6758 · Contec · Contec Solarview Compact

Name of the Vulnerable Software and Affected Versions: Contec SolarView Compact versions 6.0 and earlier Description: The issue is related to incorrect code generation management in the texteditor.php component of the Contec SolarView Compact software, which can allow an attacker to execute...

CVE-2023-46509: Improper Control of Generation of Code

An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component...

CVE-2023-46509

CVE-2023-46509 affects Contec SolarView Compact 6.0 and earlier. The vulnerability is in the texteditor.php component due to incorrect code-generation management, enabling a remote attacker to execute arbitrary code. Impact is reported as arbitrary code execution; no exploit details are provided ...

The vulnerability of the microprogramming software of the SolarView Compact device, which is used for measuring solar energy, data display, and storage, stems from insufficient protection of registration data. This allows a intruder to disclose confidential information.

The vulnerability of the microprogramming software of the SolarView Compact device, which is used for measuring solar energy, data display, and storage, is related to insufficient protection of registration data. Exploiting this vulnerability could allow an intruder to disclose confidential...

The vulnerability of the conf_mail.php component in the microprogramming software for solar power generation, data display, and storage of SolarView Compact allows a hacker to execute arbitrary commands.

The vulnerability of the confmail.php component in the microprogramming software for solar power measurement, data display, and storage in SolarView Compact exists due to the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability can...

CVE-2023-40924

SolarView Compact 6.00 is vulnerable to Directory Traversal...

CVE-2023-40924

SolarView Compact 6.00 is vulnerable to Directory Traversal...

CVE-2023-40924

SolarView Compact 6.00 is vulnerable to Directory Traversal...

Directory traversal

SolarView Compact 6.00 is vulnerable to Directory Traversal...

CVE-2023-40924

SolarView Compact 6.00 is vulnerable to Directory Traversal...

PT-2023-27704

Name of the Vulnerable Software and Affected Versions SolarView Compact versions prior to 6.00 Description The issue is related to Directory Traversal. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

CVE-2023-40924

SolarView Compact 6.00 is vulnerable to Directory Traversal...

CVE-2023-40924: Improper Limitation of a Pathname to a Restricted Directory

SolarView Compact 6.00 is vulnerable to Directory Traversal...

Contec SolarView Compact Path Traversal Vulnerability

Contec SolarView Compact is an application system from Contec Japan. It provides photovoltaic power measurement systems. A security vulnerability exists in SolarView Compact versions prior to 6.00 that stems from the presence of a directory traversal vulnerability...

SolarView Compact 6.00 Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SolarView Compact unauthenticated remote command execution vulnerability.', 'Description' = %q CONTEC's SolarView™ Series enables you to monitor...

SolarView Compact 6.00 Remote Command Execution Exploit

This Metasploit module exploits a command injection vulnerability on the SolarView Compact version 6.00 web application via the vulnerable endpoint downloader.php. After exploitation, an attacker will have full access with the same user privileges under which the webserver is running typically as...

Exploit for Command Injection in Contec Solarview_Compact_Firmware

nmap-CVE-2023-23333-exploit Nmap NSE script to dump /etc/passw...

SolarView Compact Command Injection Vulnerability

SolarView Compact contains a command injection vulnerability due to improper validation of input values on the send test mail console of the product's web server...