Description
A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary files from the host machine.
Unscored
CVE-2019-18870
EUVD-2019-8565GHSA-hm27-q8gj-j3w3
A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to d…
Published May 7, 2020 · Updated Aug 5, 2024 · Assigned by mitre