References https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/http/cves/2022/CVE-2022-40881.yaml https://vulnerability.circl.lu/vuln/fkie_cve-2022-40881 https://filestore.fortinet.com/fortiguard/outbreak_alert/solarview_compact_command_injection_vulnerability/report.pdf https://vulnerability.circl.lu/vuln/jvndb-2022-001923 https://vulnerability.circl.lu/vuln/CVE-2022-40881 https://avd.aquasec.com/nvd/2022/cve-2022-40881/ https://www.cvedetails.com/cve/CVE-2022-40881/ https://nvd.nist.gov/vuln/detail/CVE-2022-40881 https://fortiguard.fortinet.com/encyclopedia/dynamic-application-security-testing/78 https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/SolarView%20Compact%20%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%20CVE-2022-40881.md https://github.com/advisories/GHSA-wx3r-88rg-whxq https://www.tenable.com/cve/CVE-2022-40881 https://www.fortiguard.com/outbreak-alert/solarview-compact-command-injection https://soc.cyber.wa.gov.au/advisories/20230714001-SolarView-Compact-Command-Injection-Vulnerability/ https://vulmon.com/vulnerabilitydetails?qid=CVE-2022-40881 https://vuldb.com/?id.213813
Related VulnerabilitiesPoCsolarview-compact-pow-xss: SolarView Compact 6.00 - 'pow' Cross-Site ScriptingPoCsolarview-compact-time-begin-xss: SolarView Compact 6.00 - 'time_begin' Cross-Site ScriptingPoCCVE-2023-40924: SolarView Compact < 6.00 - Directory TraversalPoCCVE-2022-29298: SolarView Compact 6.00 - Local File InclusionPoCCVE-2022-29299: SolarView Compact 6.00 - 'time_begin' Cross-Site ScriptingPoCCVE-2022-29301: SolarView Compact 6.00 - 'pow' Cross-Site ScriptingPoCCVE-2022-29303: SolarView Compact 6.00 - OS Command InjectionPoCCVE-2022-31373: SolarView Compact 6.00 - Cross-Site ScriptingPoCCVE-2022-40881: SolarView 6.00 - Remote Command ExecutionPoCCVE-2023-23333: SolarView Compact 6.00 - OS Command InjectionPoCCVE-2023-29919: SolarView Compact <= 6.00 - Local File InclusionPoCCVE-2022-29303: SolarView Compact conf_mail.php 远程命令执行漏洞PoCCVE-2022-40881: SolarView network_test.php 远程命令执行漏洞