CVE-2019-18869

Leftover Debug Code in Blaauw Remote Kiln Control through v3.00r4 allows a user to execute arbitrary php code via /default.php?idx=17.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2020-05-07

Last modified

2024-08-05

Affected products

• Remote Kiln Control (Blaauwproducts)

References

• https://github.com/lodestone-security/CVEs/blob/master/remote_kiln_control/an_unfortunate_kilnundrum.md