CVE-2019-18871

2020-05-0713:06:36

mitre

www.cve.org

AI Score

Confidence

High

EPSS

0.003

Percentile

71.6%

JSON

A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbitrary files, leading to arbitrary remote code execution.

References

github.com/lodestone-security/CVEs/blob/master/remote_kiln_control/an_unfortunate_kilnundrum.md