CVE-2022-29303

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/167183/SolarView-Compact-6.0-Command-Injection.htmlExploit, Third Party Advisory
https://drive.google.com/drive/folders/1tGr-WExbpfvhRg31XCoaZOFLWyt3r60g?usp=sharingExploit, Third Party Advisory
http://packetstormsecurity.com/files/167183/SolarView-Compact-6.0-Command-Injection.htmlExploit, Third Party Advisory
https://drive.google.com/drive/folders/1tGr-WExbpfvhRg31XCoaZOFLWyt3r60g?usp=sharingExploit, Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-29303US Government Resource

Timeline

Published: May 12, 2022
Last modified: Jun 17, 2026
Added to CISA KEV: Jul 13, 2023
NVD status: Analyzed

Related CVEs from 2022

CVE-2022-293048.8Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete_ Facility.CVE-2022-293058.1imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost.CVE-2022-293069.8IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the id_page parameter in application/models/article_model.php CVE-2022-293079.8IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copy_lang_content in application/models/lang CVE-2022-293097.5mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery.CVE-2022-29317.5A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15 CVE-2022-293158.8Invicti Acunetix before 14 allows CSV injection via the Description field on the Add Targets page, if the Export CSV feature is used.CVE-2022-293169.8Complete Online Job Search System v1.0 was discovered to contain a SQL injection vulnerability via /eris/index.php?q=result&searchfor=advanc CVE-2022-293179.8Simple Bus Ticket Booking System v1.0 was discovered to contain multiple SQL injection vulnerbilities via the username and password paramete CVE-2022-293187.2An arbitrary file upload vulnerability in the New Entry module of Car Rental Management System v1.0 allows attackers to execute arbitrary co CVE-2022-29326.1Cross-site Scripting (XSS) - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2.CVE-2022-293207.8MiniTool Partition Wizard v12.0 contains an unquoted service path which allows attackers to escalate privileges to the system level.