high8.8
CVE-2019-18871
A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbitrary files…
Impact
A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbitrary files, leading to arbitrary remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Blaauwproducts | Remote Kiln Control | through 3.0.0 Version 3.0.0 |