CVE-2023-23333 PoC — Contec SolarView Compact 命令注入漏洞

Source

https://github.com/Mr-xn/CVE-2023-23333

Associated Vulnerability

Title: Contec SolarView Compact 命令注入漏洞 (CVE-2023-23333)
Description:There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php.

Description

SolarView Compact through 6.00 downloader.php commands injection (RCE) nuclei-templates

Readme

# CVE-2023-23333
SolarView Compact through 6.00 downloader.php commands injection (RCE) nuclei-templates

## Burp
![image](https://github.com/Mr-xn/CVE-2023-23333/assets/18260135/67eec781-e988-4745-8392-5a13219e2970)
## Nuclei
![image](https://github.com/Mr-xn/CVE-2023-23333/assets/18260135/9e0d9a41-b24e-49e3-a2c9-9f32048fb286)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →