CVE-2023-23333

There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

99.29% chance of exploitation in the next 30 days, 100th percentile

Nuclei

critical · CWE-77

Published

2023-02-06

Updated

2025-03-26

Proof-of-concept exploits (4)

• Timorlover/CVE-2023-233338★ · 2023-02-06
• Mr-xn/CVE-2023-2333315★ · 2023-06-16
• emanueldosreis/nmap-CVE-2023-23333-exploit2★ · 2023-08-01
• getdrive/PoC

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23333.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/solarview_unauth_rce_…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51886

Exploit collections (1)

• zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2023/CVE-2023-23333.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2017-7269
• CVE-2021-26855
• CVE-2021-42342
• CVE-2021-43798
• CVE-2022-21371
• CVE-2022-23131