Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to access MySQL credentials in cleartext in /engine/db.inc, /lang/nl.bak, or /lang/en.bak.
References
Link | Resource |
---|---|
https://github.com/lodestone-security/CVEs/blob/master/remote_kiln_control/an_unfortunate_kilnundrum.md | Exploit Third Party Advisory |
https://lodestonesecurity.com | Not Applicable |
Information
Published : 2020-05-07 06:15
Updated : 2021-07-21 04:39
NVD link : CVE-2019-18868
Mitre link : CVE-2019-18868
JSON object : View
Products Affected
blaauwproducts
- remote_kiln_control