CVE-2019-18866

Unauthenticated SQL injection via the username in the login mechanism in Blaauw Remote Kiln Control through v3.00r4 allows a user to extract arbitrary data from the rkc database...

CVE-2019-18866

The vulnerability CVE-2019-18866 affects Blaauw Remote Kiln Control (RKC). Unauthenticated SQL injection occurs via the username in the RKC login mechanism version v3.00r4, allowing an attacker to extract arbitrary data from the RKC database. The issue is documented across multiple sources (Red H...