CVE-2023-29919
CRITICAL EXPLOITED NUCLEISolarView Compact <= 6.0 - Unauthenticated Arbitrary File Read and Write via texteditor.php
Title source: llmExploitation Summary
CVE-2023-29919 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including xiaosed. A Nuclei detection template is also available.
AI-analyzed exploit summary The repository describes an arbitrary file read vulnerability in SolarView Compact 6.00 and below, where attackers can bypass authentication to read files via the texteditor.php endpoint. The PoC is a simple URL example without exploit code.
Description
SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted.
Exploits (1)
The repository describes an arbitrary file read vulnerability in SolarView Compact 6.00 and below, where attackers can bypass authentication to read files via the texteditor.php endpoint. The PoC is a simple URL example without exploit code.
Nuclei Templates (1)
http.html:"SolarView Compact" || cpe:"cpe:2.3:h:contec:solarview_compact"
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N