SolarView Compact 6.00 - 'pow' Cross-Site Scripting

披露于 2022/06/24 · 更新于 2026/09/30

CVSS 评分—/ 10.0

EPSS 概率—利用概率预测

漏洞描述

SolarView Compact version 6.00 contains a cross-site scripting vulnerability in the 'pow' parameter to Solar_SlideSub.php.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 solarview 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2023-40924 SolarView Compact < 6.00 - Directory Traversal solarview	高危	—	—	PoCEXP	2026/05/05
CVE-2023-29919 SolarView Compact <= 6.00 - Local File Inclusion solarview	严重	9.1	92.0%	PoCEXP	2023/05/23
CVE-2023-23333 SolarView Compact 6.00 - OS Command Injection solarview	严重	9.8	94.2%	PoCEXP	2023/02/07
CVE-2022-40881 SolarView 6.00 - Remote Command Execution solarview	严重	9.8	93.7%	PoCEXP	2022/11/17
CVE-2022-29299 SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting solarview	中危	—	—	PoCEXP	2022/06/24
CVE-2022-31373 SolarView Compact 6.00 - Cross-Site Scripting solarview	中危	6.1	2.2%	PoCEXP	2022/06/21