CVE-2022-35239

The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verification vulnerability when uploading files. If this vulnerability is exploited, arbitrary PHP code may be executed if a remote authenticated attacker uploads a specially crafted PHP file.

• CWE-20

• https://jvn.jp/en/vu/JVNVU93696585/Third Party Advisory
• https://www.contec.com/jp/api/downloadlogger?download=/jp/-/media/Contec/jp/support/security-info/contec_security_solarview_220727.pdfVendor Advisory
• https://www.contec.com/jp/download/donwload-list/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e#firmwareVendor Advisory
• https://jvn.jp/en/vu/JVNVU93696585/Third Party Advisory
• https://www.contec.com/jp/api/downloadlogger?download=/jp/-/media/Contec/jp/support/security-info/contec_security_solarview_220727.pdfVendor Advisory
• https://www.contec.com/jp/download/donwload-list/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e#firmwareVendor Advisory

Published

Aug 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-35230An authenticated user can create a link with reflected Javas…5.4
• CVE-2022-35234Trend Micro Security 2021 and 2022 (Consumer) is vulnerable …7.1
• CVE-2022-35235Authenticated (admin+) Arbitrary File Read vulnerability in …4.9
• CVE-2022-35236In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.…7.5
• CVE-2022-35237Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-35238Unauthenticated Plugin Settings Change vulnerability in Awes…5.3
• CVE-2022-3524A vulnerability was found in Linux Kernel. It has been decla…5.5
• CVE-2022-35240In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.…7.5
• CVE-2022-35241In versions 2.x before 2.3.1 and all versions of 1.x, when N…6.5
• CVE-2022-35242Unauthenticated plugin settings change vulnerability in 59se…5.3
• CVE-2022-35243In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.…9.1
• CVE-2022-35244A format string injection vulnerability exists in the XCMD g…9.8