GobyVuls/CVE-2023-23333.md

SolarView Compact downloader.php RCE (CVE-2023-23333)

Vulnerability	SolarView Compact downloader.php RCE (CVE-2023-23333)
Chinese name	SolarView Compact downloader.php 任意命令执行漏洞（CVE-2023-23333）
CVSS core	10.0
FOFA Query (click to view the results directly)	body="SolarView Compact"
Number of assets affected	5585
Description	There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php.
Impact	Attackers can use this vulnerability to arbitrarily execute code on the server side, write backdoors, obtain server permissions, and then control the entire web server.