CVE-2021-41652

Description

Insecure permissions in the file database.sdb of BatFlat CMS v1.3.6 allows attackers to dump the entire database.

Affected Platforms

Weakness Type

CWE-276

References

• https://deathflash1411.github.io/blog/dumping-batflat-cms-database
• https://github.com/sruupl/batflat/issues/113
• https://deathflash1411.github.io/blog/dumping-batflat-cms-database
• https://github.com/sruupl/batflat/issues/113