Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Remote Kiln Control CRITICAL 9.8
CVE-2019-18869

Leftover Debug Code in Blaauw Remote Kiln Control through v3.00r4 allows a user to execute arbitrary php code via /default.php?idx=17.

Fix: 3.0.0+
Fix from $2,300 2020-05-07
Remote Kiln Control HIGH 8.8
CVE-2019-18871

A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbit…

Fix: after 3.0.0
Fix from $1,950 2020-05-07
Remote Kiln Control HIGH 7.5
CVE-2019-18864

/server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacker to gain sensitive information about t…

Fix: after 3.0.0
Fix from $1,950 2020-05-07
Remote Kiln Control HIGH 7.5
CVE-2019-18866

Unauthenticated SQL injection via the username in the login mechanism in Blaauw Remote Kiln Control through v3.00r4 allows a user to extract arbitrar…

Fix: after 3.0.0
Fix from $1,950 2020-05-07
Remote Kiln Control HIGH 7.5
CVE-2019-18872

Weak password requirements in Blaauw Remote Kiln Control through v3.00r4 allow a user to set short or guessable passwords (e.g., 1 or 1234).

Fix: after 3.0.0
Fix from $1,950 2020-05-07
Remote Kiln Control MEDIUM 6.5
CVE-2019-18870

A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download ar…

Fix: 3.0.0+
Fix from $1,600 2020-05-07
Remote Kiln Control CRITICAL 9.8
CVE-2019-18868

Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to access MySQL credentials in cleartext in /engine/db.inc, /lang/nl.ba…

Fix: after 3.0.0
Fix from $2,300 2020-05-07
Remote Kiln Control HIGH 7.5
CVE-2019-18867

Browsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to enumerate sensitive filenames and locations, including sourc…

Fix: 3.0.0+
Fix from $1,950 2020-05-07
Remote Kiln Control MEDIUM 5.3
CVE-2019-18865

Information disclosure via error message discrepancies in authentication functions in Blaauw Remote Kiln Control through v3.00r4 allows an unauthenti…

Fix: 3.0.0+
Fix from $1,600 2020-05-07