← Back

Remote Kiln Control

remote_kiln_control

Vendor: Blaauwproducts • 9 CVEs

CVEs (9)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-18872
1Blaauwproducts
1Remote Kiln Control
Jun 17, 2026
May 7, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Weak password requirements in Blaauw Remote Kiln Control through v3.00r4 allow a user to set short or guessable passwords (e.g., 1 or 1234).
CVE-2019-18871
1Blaauwproducts
1Remote Kiln Control
Jun 17, 2026
May 7, 2020
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbitrary files, leading to arbitrary remote code execution.
CVE-2019-18870
1Blaauwproducts
1Remote Kiln Control
Jun 17, 2026
May 7, 2020
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary files from the host machine.
CVE-2019-18869
1Blaauwproducts
1Remote Kiln Control
Jun 17, 2026
May 7, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Leftover Debug Code in Blaauw Remote Kiln Control through v3.00r4 allows a user to execute arbitrary php code via /default.php?idx=17.
CVE-2019-18866
1Blaauwproducts
1Remote Kiln Control
Jun 17, 2026
May 7, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Unauthenticated SQL injection via the username in the login mechanism in Blaauw Remote Kiln Control through v3.00r4 allows a user to extract arbitrary data from the rkc database.
CVE-2019-18864
1Blaauwproducts
1Remote Kiln Control
Jun 17, 2026
May 7, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
/server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacker to gain sensitive information about the host machine.
CVE-2019-18868
1Blaauwproducts
1Remote Kiln Control
Jun 17, 2026
May 7, 2020
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to access MySQL credentials in cleartext in /engine/db.inc, /lang/nl.bak, or /lang/en.bak.
CVE-2019-18867
1Blaauwproducts
1Remote Kiln Control
Jun 17, 2026
May 7, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Browsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to enumerate sensitive filenames and locations, including source code. This affects /ajax/, /common/, /engine/, /flash/, /images/, /Im...Show more
Browsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to enumerate sensitive filenames and locations, including source code. This affects /ajax/, /common/, /engine/, /flash/, /images/, /Images/, /jscripts/, /lang/, /layout/, /programs/, and /sms/.Show less
CVE-2019-18865
1Blaauwproducts
1Remote Kiln Control
Jun 17, 2026
May 7, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Information disclosure via error message discrepancies in authentication functions in Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to enumerate valid usernames.