CVE-2023-46509

An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component...

CVE-2023-46509

An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component...

Code injection

An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component...

Contec SolarView Compact Security Vulnerability

Contec SolarView Compact is an application system from Contec Japan. It provides a photovoltaic power measurement system. A security vulnerability exists in Contec SolarView Compact v.6.0 and earlier versions, which originated from a vulnerability that allows attackers to execute arbitrary code v...

PT-2023-6758 · Contec · Contec Solarview Compact

Name of the Vulnerable Software and Affected Versions: Contec SolarView Compact versions 6.0 and earlier Description: The issue is related to incorrect code generation management in the texteditor.php component of the Contec SolarView Compact software, which can allow an attacker to execute...

CVE-2023-46509

An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component...

CVE-2023-46509

An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component...

CVE-2023-46509

CVE-2023-46509 affects Contec SolarView Compact 6.0 and earlier. The vulnerability is in the texteditor.php component due to incorrect code-generation management, enabling a remote attacker to execute arbitrary code. Impact is reported as arbitrary code execution; no exploit details are provided ...

Metasploit Weekly Wrap-Up

New module content 4 Roundcube TimeZone Authenticated File Disclosure Authors: joel, stonepresto, and thomascube Type: Auxiliary Pull request: 18286 contributed by cudalac Path: auxiliary/gather/roundcubeauthfileread AttackerKB reference: CVE-2017-16651 Description: This PR adds a module to...

CVE-2023-40924

SolarView Compact 6.00 is vulnerable to Directory Traversal...

CVE-2023-40924

SolarView Compact 6.00 is vulnerable to Directory Traversal...

CVE-2023-40924

SolarView Compact 6.00 is vulnerable to Directory Traversal...

Directory traversal

SolarView Compact 6.00 is vulnerable to Directory Traversal...

CVE-2023-40924

SolarView Compact 6.00 is vulnerable to Directory Traversal...

CVE-2023-40924

SolarView Compact versions prior to 6.00 are vulnerable to a Directory Traversal flaw. Affected product is SolarView Compact (Contec) with version

CVE-2023-40924

SolarView Compact 6.00 is vulnerable to Directory Traversal...

Contec SolarView Compact Path Traversal Vulnerability

Contec SolarView Compact is an application system from Contec Japan. It provides photovoltaic power measurement systems. A security vulnerability exists in SolarView Compact versions prior to 6.00 that stems from the presence of a directory traversal vulnerability...

PT-2023-27704

Name of the Vulnerable Software and Affected Versions SolarView Compact versions prior to 6.00 Description The issue is related to Directory Traversal. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

SolarView Compact unauthenticated remote command execution vulnerability.

CONTEC's SolarView Series enables you to monitor and visualize solar power and is only available in Japan. This module exploits a command injection vulnerability on the SolarView Compact v6.00 web application via vulnerable endpoint downloader.php. After exploitation, an attacker will have full...

SolarView Compact 6.00 Remote Command Execution Exploit

This Metasploit module exploits a command injection vulnerability on the SolarView Compact version 6.00 web application via the vulnerable endpoint downloader.php. After exploitation, an attacker will have full access with the same user privileges under which the webserver is running typically as...