Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

CRITICAL 9.8 CVE-2019-18869 Leftover Debug Code in Blaauw Remote Kiln Control through v3.00r4 allows a user to execute arbitrary php code via /default.php?idx=17. Remote Kiln Control 3.0.0+ Fix from $2,3002020-05-07 HIGH 8.8 CVE-2019-18871 A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbit… Remote Kiln Control after 3.0.0 Fix from $1,9502020-05-07 HIGH 7.5 CVE-2019-18864 /server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacker to gain sensitive information about t… Remote Kiln Control after 3.0.0 Fix from $1,9502020-05-07 HIGH 7.5 CVE-2019-18866 Unauthenticated SQL injection via the username in the login mechanism in Blaauw Remote Kiln Control through v3.00r4 allows a user to extract arbitrar… Remote Kiln Control after 3.0.0 Fix from $1,9502020-05-07 HIGH 7.5 CVE-2019-18872 Weak password requirements in Blaauw Remote Kiln Control through v3.00r4 allow a user to set short or guessable passwords (e.g., 1 or 1234). Remote Kiln Control after 3.0.0 Fix from $1,9502020-05-07 MEDIUM 6.5 CVE-2019-18870 A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download ar… Remote Kiln Control 3.0.0+ Fix from $1,6002020-05-07 CRITICAL 9.8 CVE-2019-18868 Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to access MySQL credentials in cleartext in /engine/db.inc, /lang/nl.ba… Remote Kiln Control after 3.0.0 Fix from $2,3002020-05-07 HIGH 7.5 CVE-2019-18867 Browsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to enumerate sensitive filenames and locations, including sourc… Remote Kiln Control 3.0.0+ Fix from $1,9502020-05-07 MEDIUM 5.3 CVE-2019-18865 Information disclosure via error message discrepancies in authentication functions in Blaauw Remote Kiln Control through v3.00r4 allows an unauthenti… Remote Kiln Control 3.0.0+ Fix from $1,6002020-05-07