CVE-2023-23333 PoC — Contec SolarView Compact 命令注入漏洞

Source

https://github.com/emanueldosreis/nmap-CVE-2023-23333-exploit

Associated Vulnerability

Title:Contec SolarView Compact 命令注入漏洞 (CVE-2023-23333)
Description:There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php.

Description

Nmap NSE script to dump / test Solarwinds CVE-2023-23333 vulnerability

Readme

# nmap-CVE-2023-23333-exploit
Nmap NSE script to dump /etc/passwd from remote system using Solarwinds CVE-2023-23333 vulnerability

Save the script into a file named solar-CVE-2023-23333.nse. To run the script, you can use Nmap's --script-args option to provide the output file path:

nmap -p <port> <target> --script solar-CVE-2023-23333.nse --script-args outputfile=/path/to/output.txt

CISA KEV - https://nvd.nist.gov/vuln/detail/CVE-2022-29303

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!