CVE-2022-29303 PoC — Contec SolarView Compact 操作系统命令注入漏洞

Source

https://github.com/Chocapikk/CVE-2022-29303

Associated Vulnerability

Title: Contec SolarView Compact 操作系统命令注入漏洞 (CVE-2022-29303)
Description:SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.

Description

Python script to exploit CVE-2022-29303

Readme

# CVE-2022-29303-Exploit
Exploit  for CVE-2022-29303


## Usage
Check against single host
```
   _____   _____   ___ __ ___ ___   ___ ___ ____ __ ____
  / __\ \ / / __|_|_  )  \_  )_  )_|_  ) _ \__ //  \__ /
 | (__ \ V /| _|___/ / () / / / /___/ /\_, /|_ \ () |_ \
  \___| \_/ |___| /___\__/___/___| /___|/_/|___/\__/___/

	       Coded By Valentin Lobstein
    "With great power comes great responsibility"

usage: CVE-2022-29303.py [-h] [-u URL] [-c COMMAND]

Example : python3 CVE-2022-29303.py -u https://127.0.0.1 -c 'ls'

options:
  -h, --help  show this help message and exit
  -u URL      Specify target URL
  -c COMMAND  Specify Command

Zoomeye Dork : "Copyright(C) 2007-2014 CONTEC.CO.,LTD. All rights reserved"

```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →