Security Advisory

CVE-2019-18870

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-05-07 13:05:31
Last updated 2024-08-05 02:02:39
Assigner mitre
State PUBLISHED

Description

A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary files from the host machine.