CVE-2022-29303

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
May 12, 2022
Last modified
Jun 17, 2026
Added to CISA KEV
Jul 13, 2023
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-293048.8Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete_ Facility.CVE-2022-293058.1imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost.CVE-2022-293069.8IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the id_page parameter in application/models/article_model.phpCVE-2022-293079.8IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copy_lang_content in application/models/langCVE-2022-293097.5mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery.CVE-2022-29317.5A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15CVE-2022-293158.8Invicti Acunetix before 14 allows CSV injection via the Description field on the Add Targets page, if the Export CSV feature is used.CVE-2022-293169.8Complete Online Job Search System v1.0 was discovered to contain a SQL injection vulnerability via /eris/index.php?q=result&searchfor=advancCVE-2022-293179.8Simple Bus Ticket Booking System v1.0 was discovered to contain multiple SQL injection vulnerbilities via the username and password parameteCVE-2022-293187.2An arbitrary file upload vulnerability in the New Entry module of Car Rental Management System v1.0 allows attackers to execute arbitrary coCVE-2022-29326.1Cross-site Scripting (XSS) - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2.CVE-2022-293207.8MiniTool Partition Wizard v12.0 contains an unquoted service path which allows attackers to escalate privileges to the system level.
CVE-2022-29303: Critical severity, CVSS 9.8 | Vulnix