Lucene search

Remote Kiln Control Security Vulnerabilities - CVSS Score 9 - 10

cve

CVE-2019-18868

Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to access MySQL credentials in cleartext in /engine/db.inc, /lang/nl.bak, or /lang/en.bak.

9.8CVSS

9.4AI Score

0.006EPSS

2020-05-07 01:15 PM

cve

CVE-2019-18869

Leftover Debug Code in Blaauw Remote Kiln Control through v3.00r4 allows a user to execute arbitrary php code via /default.php?idx=17.

9.8CVSS

9.6AI Score

0.007EPSS

2020-05-07 02:15 PM