Approved changes feed: RSS · Atom

cpe:2.3:a:blaauwproducts:remote_kiln_control:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBlaauwproducts (1ab36321-5920-5acb-a4e4-cf16aa25318c)
ProductRemote Kiln Control (c3ed0bb8-4871-5bad-abe0-e164cd3dbcd3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-18872 vulnerable 2026-06-08 05:13:12.490531 Details available
Weak password requirements in Blaauw Remote Kiln Control through v3.00r4 allow a user to set short or guessable passwords (e.g., 1 or 1234).
Published: 2020-05-07T13:04:24.000Z
Updated: 2024-08-05T02:02:39.496Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18871 vulnerable 2026-06-08 05:13:12.490214 Details available
A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbitrary files, leading to arbitrary remote code execution.
Published: 2020-05-07T13:06:36.000Z
Updated: 2024-08-05T02:02:39.715Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18870 vulnerable 2026-06-08 05:13:12.489764 Details available
A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary files from the host machine.
Published: 2020-05-07T13:05:31.000Z
Updated: 2024-08-05T02:02:39.735Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18869 vulnerable 2026-06-08 05:13:12.489302 Details available
Leftover Debug Code in Blaauw Remote Kiln Control through v3.00r4 allows a user to execute arbitrary php code via /default.php?idx=17.
Published: 2020-05-07T13:07:37.000Z
Updated: 2024-08-05T02:02:39.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18868 vulnerable 2026-06-08 05:13:12.488946 Details available
Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to access MySQL credentials in cleartext in /engine/db.inc, /lang/nl.bak, or /lang/en.bak.
Published: 2020-05-07T12:57:47.000Z
Updated: 2024-08-05T02:02:39.876Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18867 vulnerable 2026-06-08 05:13:12.487761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18866 vulnerable 2026-06-08 05:13:12.487379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18865 vulnerable 2026-06-08 05:13:12.484684 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18864 vulnerable 2026-06-08 05:13:12.484269 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.