Path traversal

2020-05-0714:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.7%

JSON

A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary files from the host machine.

CPENameOperatorVersion
remote_kiln_controleq3.0.0 v4
remote_kiln_controleq3.0.0
remote_kiln_controllt3.0.0

Name	Operator	Version
remote_kiln_control	eq	3.0.0 v4
remote_kiln_control	eq	3.0.0
remote_kiln_control	lt	3.0.0

References

github.com/lodestone-security/CVEs/blob/master/remote_kiln_control/an_unfortunate_kilnundrum.md