Vulnerabilities

TI-2023-25046 CVE-2023-46509 · GHSA-549w-5fgc-66mp

An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute…

MEDIUM 51

An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00919 Published 2023-10-27 No fix listed CWE-94

TI-2023-21616 CVE-2023-40924 · GHSA-r4vp-4f57-whhf

SolarView Compact < 6.00 is vulnerable to Directory Traversal.

HIGH 72

SolarView Compact < 6.00 is vulnerable to Directory Traversal.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03222 Published 2023-09-08 No fix listed CWE-22

TI-2023-14072 CVE-2023-29919 · GHSA-frrm-2grp-jmjh

SolarView Compact <= 6.0 is vulnerable to Insecure Permissions.

HIGH 83

SolarView Compact <= 6.0 is vulnerable to Insecure Permissions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.60221 Published 2023-05-23 No fix listed CWE-276

TI-2023-09196 CVE-2023-23333 · GHSA-vp93-ffq3-79vh

There is a command injection vulnerability in SolarView Compact through 6.00, attackers…

CRITICAL 88

There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99291 Published 2023-02-06 No fix listed CWE-77

TI-2022-21788 CVE-2022-44355 · GHSA-gj5x-hw6q-rwq2

SolarView Compact 7.0 is vulnerable to Cross-site Scripting (XSS) via /network_test.php.

MEDIUM 60

SolarView Compact 7.0 is vulnerable to Cross-site Scripting (XSS) via /network_test.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01788 Published 2022-11-29 No fix listed CWE-79

TI-2022-21787 CVE-2022-44354 · GHSA-r77p-mqf4-jr6p

SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file.

HIGH 82

SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0165 Published 2022-11-29 No fix listed CWE-434

TI-2022-19462 CVE-2022-40881 · GHSA-wx3r-88rg-whxq

SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php

HIGH 82

SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.31415 Published 2022-11-17 No fix listed CWE-77

Vulnerabilities

Filters

An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute…

SolarView Compact < 6.00 is vulnerable to Directory Traversal.

SolarView Compact <= 6.0 is vulnerable to Insecure Permissions.

There is a command injection vulnerability in SolarView Compact through 6.00, attackers…

SolarView Compact 7.0 is vulnerable to Cross-site Scripting (XSS) via /network_test.php.

SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file.

SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php