SolarView Compact 6.00 Remote Command Execution

This Metasploit module exploits a command injection vulnerability on the SolarView Compact version 6.00 web application via the vulnerable endpoint downloader.php. After exploitation, an attacker will have full access with the same user privileges under which the webserver is running (typically as user contec).

access application attacker command command injection contec endpoint exploitation exploits injection metasploit php privileges running solarview under version vulnerability vulnerable web web application webserver