Description
Contec SolarView Compact 是日本 Contec 公司开发的一款光伏发电测量系统。该漏洞存在于 /texteditor.php 接口中，攻击者可以通过构造恶意请求利用命令注入漏洞，执行任意命令，从而完全控制受影响的系统。
Contec SolarView Compact /texteditor.php 代码执行漏洞（CVE-2023-46509）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-46509
https://cve.imfht.com/detail/CVE-2023-46509
https://www.nsfocus.net/vulndb/88872
https://zone.ci/aliyun/ali_nvd/16286.html
https://vuldb.com/vuln/243743
https://github.com/advisories/GHSA-549w-5fgc-66mp
https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2023-46509
https://gist.github.com/ATonysan/d6f72e9eb90407d64bed4566aa80afb1#file-cve-2023-46509