Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-29298. PoCs published by Ahmed Alroky. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in SolarView Compact 6.00, allowing unauthorized access to sensitive files via a crafted URL. The PoC leverages a null byte injection to bypass file extension checks.
Description
SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in SolarView Compact 6.00, allowing unauthorized access to sensitive files via a crafted URL. The PoC leverages a null byte injection to bypass file extension checks.
Nuclei Templates (1)
http.html:"SolarView Compact" || http.html:"solarview compact"
body="solarview compact"
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N