CVE-2019-18871

A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbitrary files, leading to arbitrary remote code execution.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:blaauwproducts:remote_kiln_control:3.0.0:v4:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:blaauwproducts:remote_kiln_control:*:*:*:*:*:*:*:*

Information

Published : 2020-05-07 07:15

Updated : 2020-05-12 06:45


NVD link : CVE-2019-18871

Mitre link : CVE-2019-18871


JSON object : View

CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Advertisement

dedicated server usa

Products Affected

blaauwproducts

  • remote_kiln_control