High severity7.5NVD Advisory· Published May 7, 2020· Updated Jun 17, 2026
CVE-2019-18866
CVE-2019-18866
Description
Unauthenticated SQL injection via the username in the login mechanism in Blaauw Remote Kiln Control through v3.00r4 allows a user to extract arbitrary data from the rkc database.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Range: <=3.00r4
- Blaauw/Remote Kiln Controldescription
cpe:2.3:a:blaauwproducts:remote_kiln_control:3.0.0:r4:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:blaauwproducts:remote_kiln_control:3.0.0:r4:*:*:*:*:*:*
- cpe:2.3:a:blaauwproducts:remote_kiln_control:*:*:*:*:*:*:*:*range: <=3.0.0
Patches
Vulnerability mechanics
References
1- github.com/lodestone-security/CVEs/blob/master/remote_kiln_control/an_unfortunate_kilnundrum.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.