Vulnerabilities > Blaauwproducts > Critical
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2020-05-07 | CVE-2019-18869 | Unspecified vulnerability in Blaauwproducts Remote Kiln Control 3.0.0 Leftover Debug Code in Blaauw Remote Kiln Control through v3.00r4 allows a user to execute arbitrary php code via /default.php?idx=17. | 9.8 |
2020-05-07 | CVE-2019-18868 | Insufficiently Protected Credentials vulnerability in Blaauwproducts Remote Kiln Control 3.0.0 Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to access MySQL credentials in cleartext in /engine/db.inc, /lang/nl.bak, or /lang/en.bak. | 9.8 |