SolarView Compact contains a command injection vulnerability due to improper validation of input values on the send test mail console of the product's web server.
Multiple directory traversal vulnerabilities in (1) modevhost and (2) modsimplevhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. (dot dot) in the host name, related to requestcheckhostname.
SolarView Compact v6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component SolarAiConf.php.
SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.