CVE-2019-18870

A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary…

published May 7, 2020

CVSS
—
EPSS
1%
Percentile
66.3
In the wild
Unconfirmed
What it is

A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary files from the host machine.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01136 · 66.3th percentile
Published
2020-05-07T13:05Z
EPSS history
Timeline
  • 07 MAY 13:05Z
    A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary…
    cvelistv5