BFCommand and Control Server Manager are both susceptible to multiple bugs. BFCC versions 1.22_A and below and BFVCC versions 2.14_B and below are susceptible to full anonymous login bypass and various manipulation flaws.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39706/bfccown.txt
Source: https://packetstormsecurity.com/files/39706/bfccown.txt.html