CVE-2022-29303

NVD Published Date: May 12, 2022 at 04:15 PM

NVD Last Modified: August 08, 2023 at 02:21 PM

Download Patch

Vulnerability ID

CVE-2022-29303

Severity

CRITICAL

Severity Score

9.8

Summary

SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.

References

https://drive.google.com/drive/folders/1tGr-WExbpfvhRg31XCoaZOFLWyt3r60g?usp=sharing

http://packetstormsecurity.com/files/167183/SolarView-Compact-6.0-Command-Injection.html

Mitigation and Patches

Exploits

https://www.exploit-db.com/exploits/50940

https://github.com/Chocapikk/CVE-2022-29303

https://drive.google.com/drive/folders/1tGr-WExbpfvhRg31XCoaZOFLWyt3r60g?usp=sharing

http://packetstormsecurity.com/files/167183/SolarView-Compact-6.0-Command-Injection.html

https://unit42.paloaltonetworks.com/network-security-trends-update/

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

https://github.com/Chocapikk/CVE-2022-29303

Metasploit Payload

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE ID

CWE-78

Recent Publish

CVE-2022-26134

CVE-2022-26352

CVE-2022-35405

CVE-2024-38207

CVE-2024-7568

CVE-2023-0926

See SecOps Solution
in action

Schedule Demo

Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions

CVE-2022-29303

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2022-29303

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action