CVE-2023-29919 PoC — Contec SolarView Compact 安全漏洞

Source

https://github.com/xiaosed/CVE-2023-29919

Associated Vulnerability

Title: Contec SolarView Compact 安全漏洞 (CVE-2023-29919)
Description:SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted.

Readme

# Summary:

There is an arbitrary read file vulnerability in SolarView Compact 6.00 and below, attackers can bypass authentication to read files through texteditor.php

## Vendor:

SolarView Compact

## Affected Product:

SolarView Compact <=ver 6.00

## poc:

http://example.com/texteditor.php

## Details:

You can fill in the location of the file you want to read by visiting the texteditor.php page

![image](https://github.com/xiaosed/CVE-2023-29919/assets/84080097/7060cf40-e3df-44bb-9e25-80e331e26ee2)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →