CVE-2023-29919 PoC — Contec SolarView Compact 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29919.yaml

Associated Vulnerability

Title:Contec SolarView Compact 安全漏洞 (CVE-2023-29919)
Description:Contec SolarView Compact是日本Contec公司的一个应用系统。提供光伏发电测量系统。 Contec SolarView Compact 6.0及之前版本存在安全漏洞，该漏洞源于texteditor.php 不受限制，服务器上的任何文件都可以被读取或修改。

Description

There is an arbitrary read file vulnerability in SolarView Compact 6.00 and below, attackers can bypass authentication to read files through texteditor.php

File Snapshot


 id: CVE-2023-29919

info:
  name: SolarView Compact <= 6.00 - Local File Inclusion
  author: For3stC

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!