VYPR
← All advisories
High severity7.5NVD Advisory· Published May 7, 2020· Updated Jun 17, 2026

CVE-2019-18867

CVE-2019-18867

Description

Browsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to enumerate sensitive filenames and locations, including source code. This affects /ajax/, /common/, /engine/, /flash/, /images/, /Images/, /jscripts/, /lang/, /layout/, /programs/, and /sms/.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Blaauw/Remote Kiln Controlllm-create
    Range: <=3.00r4
  • Blaauw/Remote Kiln Controldescription
  • Blaauwproducts/Remote Kiln Control3 versions
    cpe:2.3:a:blaauwproducts:remote_kiln_control:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:blaauwproducts:remote_kiln_control:*:*:*:*:*:*:*:*range: <3.0.0
    • cpe:2.3:a:blaauwproducts:remote_kiln_control:3.0.0:-:*:*:*:*:*:*
    • cpe:2.3:a:blaauwproducts:remote_kiln_control:3.0.0:v4:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.