漏洞描述
SolarViewCompact是日本Kangtaike公司的一个应用系统。提供光伏发电测量系统。downloader.php存在任意文件读取漏洞，攻击者可通过该漏洞系统文件。
SolarView Compact 6.0 downloader.php任意文件读取漏洞(CVE-2022-29298)
PoC代码
暂无相关漏洞推荐
- POC CVE-2022-29298: SolarView Compact 6.00 - Local File Inclusion
- POC CVE-2022-29299: SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting
- POC CVE-2022-29301: SolarView Compact 6.00 - 'pow' Cross-Site Scripting
- POC CVE-2022-29303: SolarView Compact 6.00 - OS Command Injection
- POC CVE-2022-31373: SolarView Compact 6.00 - Cross-Site Scripting
- POC CVE-2022-40881: SolarView 6.00 - Remote Command Execution
- POC CVE-2023-23333: SolarView Compact 6.00 - OS Command Injection
- POC CVE-2023-29298: Adobe ColdFusion - Access Control Bypass
- POC CVE-2023-29919: SolarView Compact <= 6.00 - Local File Inclusion
- POC CVE-2022-29303: SolarView Compact conf_mail.php 远程命令执行漏洞
- POC CVE-2022-40881: SolarView network_test.php 远程命令执行漏洞
- POC CVE-2023-23333: SolarView downloader.php rce
- POC CVE-2023-29919: SolarView Compact <= 6.00 - Local File Inclusion