CVE-2022-29298

SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal...

SolarView Compact 6.00 Directory Traversal

Exploit Title: SolarView Compact 6.00 - Directory Traversal Date: 2022-05-15 Exploit Author: Ahmed Alroky Author Company : Aiactive Author linkedin profile : https://www.linkedin.com/in/ahmedalroky/ Version: ver.6.00 Vendor home page : https://www.contec.com/ Authentication Required: No CVE :...

CVE-2022-29298

SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal...

CVE-2022-29298

Summary (CVE-2022-29298) SolarView Compact ver.6.00 is vulnerable to local file inclusion via directory traversal on the product web server (download page). The vulnerability stems from improper validation of the URL parameter on the download page, potentially allowing an attacker to view or obta...