high7.5
CVE-2019-18866
Unauthenticated SQL injection via the username in the login mechanism in Blaauw Remote Kiln Control through v3.00r4 allows a user to extract arbitrary data fro…
Impact
Unauthenticated SQL injection via the username in the login mechanism in Blaauw Remote Kiln Control through v3.00r4 allows a user to extract arbitrary data from the rkc database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Blaauwproducts | Remote Kiln Control | through 3.0.0 Version 3.0.0 |