CVE-2019-18866

概要

参考情報

• lodestone-security/CVEs · Exploit

remote kiln control のその他の脆弱性

• CVE-2019-18872高 7.5Weak password requirements in Blaauw Remote Kiln Control through v3.00r4 allow a user to set short or guessable passwords (e.g., 1 or 1234).
• CVE-2019-18871高 8.8A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upl…
• CVE-2019-18870中 6.5A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to do…
• CVE-2019-18869緊急 9.8Leftover Debug Code in Blaauw Remote Kiln Control through v3.00r4 allows a user to execute arbitrary php code via /default.php?idx=17.
• CVE-2019-18864高 7.5/server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacker to gain sensitive informatio…