SolarView Compact < 6.00 - Directory Traversal

SolarView Compact before version 6.00 is vulnerable to directory traversal via the file parameter in downloader.php. An unauthenticated attacker can read arbitrary files from the system by using path traversal sequences with a null byte bypass to access sensitive files such as /etc/passwd. id:...

SolarView Compact 6.00 - OS Command Injection

SolarView Compact 6.00 was discovered to contain a command injection vulnerability, attackers can execute commands by bypassing internal restrictions through downloader.php. id: CVE-2023-23333 info: name: SolarView Compact 6.00 - OS Command Injection author: Mr-xn severity: critical description: ...

SolarView Compact 6.00 - Cross-Site Scripting

SolarView Compact 6.00 contains a cross-site scripting vulnerability via SolarAiConf.php. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...

SolarView 6.00 - Remote Command Execution

SolarView Compact 6.00 is vulnerable to a command injection via networktest.php. id: CVE-2022-40881 info: name: SolarView 6.00 - Remote Command Execution author: For3stCo1d severity: critical description: | SolarView Compact 6.00 is vulnerable to a command injection via networktest.php. impact: |...

SolarView Compact <= 6.00 - Local File Inclusion

There is an arbitrary read file vulnerability in SolarView Compact 6.00 and below, attackers can bypass authentication to read files through texteditor.php id: CVE-2023-29919 info: name: SolarView Compact = 6.00 - Local File Inclusion author: For3stCo1d severity: critical description: | There is ...

SolarView Compact 6.00 - Local File Inclusion

SolarView Compact 6.00 is vulnerable to local file inclusion which could allow attackers to access sensitive files. id: CVE-2022-29298 info: name: SolarView Compact 6.00 - Local File Inclusion author: ritikchaddha severity: high description: SolarView Compact 6.00 is vulnerable to local file...

CVE-2023-23333

CVE-2023-23333 SolarView Compact bis 6.00 downloader.php Befehlsinjektion RCE nuclei-templates Burp Nuclei...

CVE-2023-40924

BUGAutor: YE Betroffene Version: Contec SolarView Compact 6.00 Anbieter: https://www.contecinc.com/ Verwundbare Datei: downloader.php Beschreibung: Ein Angreifer nutzt die Schwachstelle über downloader.php aus? Der Parameter file liest vertrauliche Dateien durch Directory-Traversal...

CVE-2023-29919

Resumo: Existe uma vulnerabilidade de leitura arbitrária de arquivos no SolarView Compact 6.00 e anteriores; atacantes podem contornar a autenticação para ler arquivos através do texteditor.php Fornecedor: SolarView Compact Produto Afetado: SolarView Compact = versão 6.00 poc:...

CVE-2023-23333

Zusammenfassung: Es gibt eine Befehlsinjektion-Schwachstelle in SolarView Compact bis Version 6.00. Angreifer können Befehle ausführen, indem sie interne Einschränkungen über downloader.php umgehen. Anbieter: SolarView Compact Betroffenes Produkt: SolarView Compact Version: SolarView Compact =ver...

CVE-2022-40881

CVE-2022-40881 fofa body="SolarView Compact" && title=="Top" Haftungsausschluss Dieses Tool ist ausschließlich für rechtmäßig autorisierte Maßnahmen im Bereich der Unternehmenssicherheit bestimmt. Wenn Sie die Funktionsfähigkeit dieses Tools testen möchten, richten Sie bitte selbst eine...

solarview-ics-vulnerability-analysis

SolarView ICS-Schwachstellenanalyse Eine cyber-physische Bedrohungsanalyse des SolarView Compact / Mirai-Botnetz-Vorfalls, bei dem Angreifer CVE-2022-29303 ausnutzten, um rund 800 Solarüberwachungsgeräte an japanischen Photovoltaikanlagen zu kompromittieren. Kursprojekt für ECE 362 — Cyber-Physic...

SolarView Compact 6.00 - OS Command Injection

SolarView Compact 6.00 was discovered to contain a command injection vulnerability via confmail.php. id: CVE-2022-29303 info: name: SolarView Compact 6.00 - OS Command Injection author: badboycxcc severity: critical description: | SolarView Compact 6.00 was discovered to contain a command injecti...

Multiple vulnerabilities in SolarView Compact

Overview SolarView Compact provided by Contec Co., Ltd. contains multiple vulnerabilities listed below. OS command injection in Schedule Settings CWE-78 - CVE-2026-82794 Cross-site scripting in Schedule Settings and Mail Send Setting CWE-79 - CVE-2026-82795 Cross-site scripting in Image Managemen...

CVE-2026-82794

SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82795

SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82796

SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82796

SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82796

SolarView Compact (Contec) contains a cross-site scripting vulnerability in the Image Management component. An attacker with valid login credentials can exploit it to execute an arbitrary OS command , achieving impact on a subsequent system due to changed scope . The CVSS 3.1 base score is 5.4 (M...

EUVD-2026-77252

SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...