.. / CVE-2023-23333

Exploit for SolarView Compact 6.00 - OS Command Injection (CVE-2023-23333)

Description:

SolarView Compact 6.00 was discovered to contain a command injection vulnerability, attackers can execute commands by bypassing internal restrictions through downloader.php.

Nuclei Template

View the template here CVE-2023-23333.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-23333.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2023-23333
https://github.com/Mr-xn/CVE-2023-23333
https://github.com/h00die-gr3y/Metasploit
https://github.com/Timorlover/CVE-2023-23333
http://packetstormsecurity.com/files/174537/SolarView-Compact-6.00-Remote-Command-Execution.html