CVE-2023-40924

BUGAuthor: YE Affected version: Contec SolarView Compact 6.00 Vendor: https://www.contecinc.com/ Vulnerability File: downloader.php Description: Attacker exploit the vulnerability through downloader.php? The file parameter reads sensitive files through the directory pass. downloader.php?file...

CVE-2022-40881

CVE-2022-40881 fofa body="SolarView Compact" && title=="Top" Disclaimer This tool is intended only for legally authorized enterprise security building activities. If you need to test the usability of this tool, please set up your own target environment. When using this tool for detection, you...

SolarView Compact < 6.00 - Directory Traversal

SolarView Compact before version 6.00 is vulnerable to directory traversal via the file parameter in downloader.php. An unauthenticated attacker can read arbitrary files from the system by using path traversal sequences with a null byte bypass to access sensitive files such as /etc/passwd. id:...

CVE-2023-23333

Summary: There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php. Vendor: SolarView Compact Affected Product: SolarView Compact Version: SolarView Compact =ver 6.00 poc: curl...

CVE-2023-23333

CVE-2023-23333 SolarView Compact through 6.00 downloader.php commands injection RCE nuclei-templates Burp Nuclei...

CVE-2023-29919

Summary: There is an arbitrary read file vulnerability in SolarView Compact 6.00 and below, attackers can bypass authentication to read files through texteditor.php Vendor: SolarView Compact Affected Product: SolarView Compact =ver 6.00 poc: http://example.com/texteditor.php Details: You can fill...

SolarView Compact 6.00 - OS Command Injection

SolarView Compact 6.00 was discovered to contain a command injection vulnerability, attackers can execute commands by bypassing internal restrictions through downloader.php. id: CVE-2023-23333 info: name: SolarView Compact 6.00 - OS Command Injection author: Mr-xn severity: critical description: ...

solarview-ics-vulnerability-analysis

SolarView ICS Vulnerability Analysis A cyber-physical threat analysis of the SolarView Compact / Mirai botnet incident, in which attackers exploited CVE-2022-29303 to compromise roughly 800 solar monitoring appliances at Japanese photovoltaic facilities. Course project for ECE 362 — Cyber-Physica...

Multiple vulnerabilities in SolarView Compact

Overview SolarView Compact provided by Contec Co., Ltd. contains multiple vulnerabilities listed below. OS command injection in Schedule Settings CWE-78 - CVE-2026-82794 Cross-site scripting in Schedule Settings and Mail Send Setting CWE-79 - CVE-2026-82795 Cross-site scripting in Image Managemen...

CVE-2026-82794

SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82795

SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82796

SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82796

SolarView Compact (Contec) contains a cross-site scripting vulnerability in the Image Management component. An attacker with valid login credentials can exploit it to execute an arbitrary OS command , achieving impact on a subsequent system due to changed scope . The CVSS 3.1 base score is 5.4 (M...

CVE-2026-82796

SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82796

SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

EUVD-2026-77252

SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82795

SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

EUVD-2026-77251

SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82795

SolarView Compact (Contec) contains a cross-site scripting (XSS) vulnerability in its Schedule Settings and Mail Send Setting features. If exploited, the XSS can be leveraged to execute an arbitrary OS command by an attacker who has valid credentials to log into the product. The CVSS v3.1 score i...

CVE-2026-82795

SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...