Login Request a demo
RK
Product
Remote Kiln Control
by Blaauwproducts · last CVE May 7, 2020
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 5Medium 2Low 0
Severity
All severities9Critical2High5Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Remote Kiln Control to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-18869
9.8
1%
May 7
Leftover Debug Code in Blaauw Remote Kiln Control through v3.00r4 allows a user to execute arbitrary php code via /default.php?idx=17
Affected: before 3.0.0; 3.0.0; 3.0.0
CVE-2019-18868
9.8
1%
May 7
Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to access MySQL credentials in cleartext in /engine/db.inc, /lang/nl.bak, or /lang/en.bak
Affected: 3.0.0; through 3.0.0
CVE-2019-18871
8.8
3%
May 7
A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbitrary files, leading to…
Affected: 3.0.0; through 3.0.0
CVE-2019-18872
7.5
1%
May 7
Weak password requirements in Blaauw Remote Kiln Control through v3.00r4 allow a user to set short or guessable passwords (e.g., 1 or 1234)
Affected: 3.0.0; through 3.0.0
CVE-2019-18866
7.5
1%
May 7
Unauthenticated SQL injection via the username in the login mechanism in Blaauw Remote Kiln Control through v3.00r4 allows a user to extract arbitrary data from the rkc database
Affected: 3.0.0; through 3.0.0
CVE-2019-18864
7.5
1%
May 7
/server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacker to gain sensitive information about the host machine
Affected: 3.0.0; through 3.0.0
CVE-2019-18867
7.5
1%
May 7
Browsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to enumerate sensitive filenames and locations, including source code
Affected: before 3.0.0; 3.0.0; 3.0.0
CVE-2019-18870
6.5
1%
May 7
A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary files from the host…
Affected: before 3.0.0; 3.0.0; 3.0.0
CVE-2019-18865
5.3
1%
May 7
Information disclosure via error message discrepancies in authentication functions in Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to enumerate…
Affected: before 3.0.0; 3.0.0; 3.0.0
Showing 9