medium6.5
CVE-2019-18870
A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary fi…
Impact
A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary files from the host machine.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Blaauwproducts | Remote Kiln Control | before 3.0.0 Version 3.0.0 |