Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2023-29919 PoC — Contec SolarView Compact 安全漏洞

Source
Associated Vulnerability
Title:Contec SolarView Compact 安全漏洞 (CVE-2023-29919)
Description:Contec SolarView Compact是日本Contec公司的一个应用系统。提供光伏发电测量系统。 Contec SolarView Compact 6.0及之前版本存在安全漏洞,该漏洞源于texteditor.php 不受限制,服务器上的任何文件都可以被读取或修改。
Readme
# Summary:

There is an arbitrary read file vulnerability in SolarView Compact 6.00 and below, attackers can bypass authentication to read files through texteditor.php

## Vendor:

SolarView Compact

## Affected Product:

SolarView Compact <=ver 6.00

## poc:

http://example.com/texteditor.php

## Details:

You can fill in the location of the file you want to read by visiting the texteditor.php page

![image](https://github.com/xiaosed/CVE-2023-29919/assets/84080097/7060cf40-e3df-44bb-9e25-80e331e26ee2)
File Snapshot

[4.0K] /data/pocs/5b8768578b471f4494ac03d8c0a41a4893b1cd00 └── [ 530] README.md 0 directories, 1 file
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.