CVE-2023-29919

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-276

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/xiaosed/CVE-2023-29919/Exploit, Third Party Advisory
https://www.solarview.io/Not Applicable
https://github.com/xiaosed/CVE-2023-29919/Exploit, Third Party Advisory
https://www.solarview.io/Not Applicable

Timeline

Published: May 23, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-29927.5An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under CVE-2023-299215.3PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface.CVE-2023-299225.3PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.CVE-2023-299235.3PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface.CVE-2023-299249.8PowerJob V4.3.1 is vulnerable to Incorrect Access Control that allows for remote code execution.CVE-2023-299269.8PowerJob V4.3.2 has unauthorized interface that causes remote code execution.CVE-2023-299274.3Versions of Sage 300 through 2022 implement role-based access controls that are only enforced client-side. Low-privileged Sage users, partic CVE-2023-299297.5Buffer Overflow vulnerability found in Kemptechnologies Loadmaster before v.7.2.60.0 allows a remote attacker to casue a denial of service v CVE-2023-29936.3A valid, authenticated user with limited privileges may be able to use specifically crafted web management server API calls to execute a lim CVE-2023-299308.8An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execute arbitrary code via CVE-2023-299319.8laravel-s 3.7.35 is vulnerable to Local File Inclusion via /src/Illuminate/Laravel.php.CVE-2023-299325.5llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand.