Approved changes feed: RSS · Atom

cpe:2.3:a:blaauwproducts:remote_kiln_control:3.0.0:-:*:*:*:*:*:*

part: a version: 3.0.0 update: -

VendorBlaauwproducts (1ab36321-5920-5acb-a4e4-cf16aa25318c)
ProductRemote Kiln Control (c3ed0bb8-4871-5bad-abe0-e164cd3dbcd3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-18870 vulnerable 2026-06-08 05:13:12.489787 Details available
A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary files from the host machine.
Published: 2020-05-07T13:05:31.000Z
Updated: 2024-08-05T02:02:39.735Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18869 vulnerable 2026-06-08 05:13:12.489325 Details available
Leftover Debug Code in Blaauw Remote Kiln Control through v3.00r4 allows a user to execute arbitrary php code via /default.php?idx=17.
Published: 2020-05-07T13:07:37.000Z
Updated: 2024-08-05T02:02:39.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18867 vulnerable 2026-06-08 05:13:12.487788 Details available
Browsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to enumerate sensitive filenames and locations, including source code. This affects /ajax/, /common/, /engine/, /flash/, /images/, /Images/, /jscripts/, /lang/, /layout/, /programs/, and /sms/.
Published: 2020-05-07T12:59:45.000Z
Updated: 2024-08-05T02:02:39.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18865 vulnerable 2026-06-08 05:13:12.485680 Details available
Information disclosure via error message discrepancies in authentication functions in Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to enumerate valid usernames.
Published: 2020-05-07T12:56:26.000Z
Updated: 2024-08-05T02:02:39.559Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.