References https://www.ddpoc.com/DVB-2022-3761.html https://www.ddpoc.com/DVB-2022-3670.html https://vulncheck.com/blog/solarview-exploitation https://github.com/strik3r0x1/Vulns/blob/main/Unrestricted%20File%20Upload_%20SolarView%20Compact%204.0%2C5.0.md https://cve.imfht.com/detail/CVE-2022-31374 https://nvd.nist.gov/vuln/detail/CVE-2022-44354 https://www.redpacketsecurity.com/solarview-compact-file-upload-cve-2022-35239/
Related VulnerabilitiesPoCsolarview-compact-pow-xss: SolarView Compact 6.00 - 'pow' Cross-Site ScriptingPoCsolarview-compact-time-begin-xss: SolarView Compact 6.00 - 'time_begin' Cross-Site ScriptingPoCCVE-2023-40924: SolarView Compact < 6.00 - Directory TraversalPoCCVE-2021-40859: Auerswald COMpact 5500R 7.8A and 8.0B Devices BackdoorPoCCVE-2022-29298: SolarView Compact 6.00 - Local File InclusionPoCCVE-2022-29299: SolarView Compact 6.00 - 'time_begin' Cross-Site ScriptingPoCCVE-2022-29301: SolarView Compact 6.00 - 'pow' Cross-Site ScriptingPoCCVE-2022-29303: SolarView Compact 6.00 - OS Command InjectionPoCCVE-2022-31373: SolarView Compact 6.00 - Cross-Site ScriptingPoCCVE-2022-40881: SolarView 6.00 - Remote Command ExecutionPoCCVE-2023-23333: SolarView Compact 6.00 - OS Command InjectionPoCCVE-2023-29919: SolarView Compact <= 6.00 - Local File Inclusion