A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbitrary files, leading to arbitrary remote code execution.
References
Link | Resource |
---|---|
https://github.com/lodestone-security/CVEs/blob/master/remote_kiln_control/an_unfortunate_kilnundrum.md | Exploit Third Party Advisory |
Information
Published : 2020-05-07 07:15
Updated : 2020-05-12 06:45
NVD link : CVE-2019-18871
Mitre link : CVE-2019-18871
JSON object : View
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Products Affected
blaauwproducts
- remote_kiln_control