290 matches found
CVE-2023-23333
Краткое описание: Существует уязвимость внедрения команд в SolarView Compact до версии 6.00, злоумышленники могут выполнять команды, обходя внутренние ограничения через downloader.php. Производитель: SolarView Compact Затронутый продукт: SolarView Compact Версия: SolarView Compact =ver 6.00...
CVE-2023-23333
CVE-2023-23333 SolarView Compact до версии 6.00: инъекция команд RCE в downloader.php, nuclei-templates Burp Nuclei...
SolarView Compact < 6.00 - Directory Traversal
SolarView Compact before version 6.00 is vulnerable to directory traversal via the file parameter in downloader.php. An unauthenticated attacker can read arbitrary files from the system by using path traversal sequences with a null byte bypass to access sensitive files such as /etc/passwd. id:...
SolarView Compact 6.00 - Cross-Site Scripting
SolarView Compact 6.00 contains a cross-site scripting vulnerability via SolarAiConf.php. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...
CVE-2022-40881
CVE-2022-40881 fofa root@kitploit: body="SolarView Compact" && title=="Top" Haftungsausschluss Dieses Tool ist ausschließlich für rechtmäßig autorisierte Maßnahmen im Bereich der Unternehmenssicherheit bestimmt. Wenn Sie die Funktionsfähigkeit dieses Tools testen möchten, richten Sie bitte selbst...
SolarView Compact 6.00 - OS Command Injection
SolarView Compact 6.00 was discovered to contain a command injection vulnerability via confmail.php. id: CVE-2022-29303 info: name: SolarView Compact 6.00 - OS Command Injection author: badboycxcc severity: critical description: | SolarView Compact 6.00 was discovered to contain a command injecti...
SolarView 6.00 - Remote Command Execution
SolarView Compact 6.00 is vulnerable to a command injection via networktest.php. id: CVE-2022-40881 info: name: SolarView 6.00 - Remote Command Execution author: For3stCo1d severity: critical description: | SolarView Compact 6.00 is vulnerable to a command injection via networktest.php. impact: |...
SolarView Compact 6.00 - Local File Inclusion
SolarView Compact 6.00 is vulnerable to local file inclusion which could allow attackers to access sensitive files. id: CVE-2022-29298 info: name: SolarView Compact 6.00 - Local File Inclusion author: ritikchaddha severity: high description: SolarView Compact 6.00 is vulnerable to local file...
SolarView Compact <= 6.00 - Local File Inclusion
There is an arbitrary read file vulnerability in SolarView Compact 6.00 and below, attackers can bypass authentication to read files through texteditor.php id: CVE-2023-29919 info: name: SolarView Compact = 6.00 - Local File Inclusion author: For3stCo1d severity: critical description: | There is ...
SolarView Compact 6.00 - OS Command Injection
SolarView Compact 6.00 was discovered to contain a command injection vulnerability, attackers can execute commands by bypassing internal restrictions through downloader.php. id: CVE-2023-23333 info: name: SolarView Compact 6.00 - OS Command Injection author: Mr-xn severity: critical description: ...
CVE-2023-29919
Riepilogo: Esiste una vulnerabilità di lettura arbitraria di file in SolarView Compact 6.00 e versioni precedenti, gli aggressori possono bypassare l'autenticazione per leggere file tramite texteditor.php Produttore: SolarView Compact Prodotto interessato: SolarView Compact =ver 6.00 PoC:...
solarview-ics-vulnerability-analysis
Análise de Vulnerabilidade ICS SolarView Uma análise de ameaças ciberfísicas do incidente SolarView Compact / botnet Mirai, no qual atacantes exploraram a CVE-2022-29303 para comprometer aproximadamente 800 dispositivos de monitoramento solar em usinas fotovoltaicas japonesas. Projeto de curso pa...
CVE-2023-40924
Autor do Bug: YE Versão afetada: Contec SolarView Compact 6.00 Fornecedor: https://www.contecinc.com/ Arquivo da vulnerabilidade: downloader.php Descrição: O atacante explora a vulnerabilidade através de downloader.php? O parâmetro file lê arquivos sensíveis através do percurso de diretório...
SolarView Compact 6.00 - 'pow' Cross-Site Scripting
SolarView Compact version 6.00 contains a cross-site scripting vulnerability in the 'pow' parameter to SolarSlideSub.php. id: CVE-2022-29301 info: name: SolarView Compact 6.00 - 'pow' Cross-Site Scripting author: For3stCo1d severity: high description: | SolarView Compact version 6.00 contains a...
SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting
SolarView Compact version 6.00 contains a cross-site scripting vulnerability in the 'timebegin' parameter to SolarHistory.php. id: CVE-2022-29299 info: name: SolarView Compact 6.00 - 'timebegin' Cross-Site Scripting author: For3stCo1d severity: medium description: | SolarView Compact version 6.00...
CVE-2023-29919
SolarView Compact = 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted...
CVE-2023-40924
SolarView Compact 6.00 is vulnerable to Directory Traversal...
CVE-2022-35239
The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verification vulnerability when uploading files. If this vulnerability is exploited, arbitrary PHP code may be executed if a remote authenticated...
