CVE-2023-23333 PoC — Contec SolarView Compact 命令注入漏洞

Source

https://github.com/binaryusergearone/SolarView-Compact-6.00-Command-Injection-Exploit-CVE-2023-23333-

Associated Vulnerability

Title:Contec SolarView Compact 命令注入漏洞 (CVE-2023-23333)
Description:Contec SolarView Compact是日本Contec公司的一个应用系统。提供光伏发电测量系统。 Contec SolarView Compact 6.00版本及之前版本存在安全漏洞。攻击者利用该漏洞通过downloader.php绕过内部限制来执行命令。

Readme

# SolarView Compact 6.00 Command Injection Exploit (CVE-2023-23333)

This tool exploits a command injection vulnerability in SolarView Compact 6.00, identified as CVE-2023-23333. The vulnerability allows remote attackers to execute arbitrary commands on the target system.

## Features
- Exploits command injection vulnerability
- Extracts content of `/etc/passwd` file

## Requirements
- Python 3.x



## Usage
```bash
python exploit.py -i <TARGET_IP> -p <TARGET_PORT>

File Snapshot


 [4.0K]  /data/pocs/80a0cc7cbe178872f295d41d8483e62ea49227b9
├── [1.5K]  exploit.py
├── [1.0K]  LICENSE
└── [ 470]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!