mirror of
https://github.com/gobysec/GobyVuls.git
synced 2025-05-06 02:31:35 +00:00
14 lines
923 B
Markdown
14 lines
923 B
Markdown
|
## SolarView Compact downloader.php RCE (CVE-2023-23333)
|
|||
|
|
|
|||
|
|
| **Vulnerability** | **SolarView Compact downloader.php RCE (CVE-2023-23333)** |
|
|||
|
|
| :----: | :-----|
|
|||
|
|
| **Chinese name** | SolarView Compact downloader.php 任意命令执行漏洞（CVE-2023-23333）|
|
|||
|
|
| **CVSS core** | 10.0 |
|
|||
|
|
| **FOFA Query** (click to view the results directly)| [body="SolarView Compact"](https://fofa.info/result?qbase64=dGl0bGU9PSJwbGF5U01TIg%3D%3D) |
|
|||
|
|
| **Number of assets affected** | 5585 |
|
|||
|
|
| **Description** | There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php. |
|
|||
|
|
| **Impact** | Attackers can use this vulnerability to arbitrarily execute code on the server side, write backdoors, obtain server permissions, and then control the entire web server. |
|
|||
|
|
|
|||
|
|
|
|||
|
|
|