CVE-2021-41652

概要

参考情報

• deathflash1411.github.io/blog/dumping-batflat-cms-database · Broken Link
• sruupl/batflat · Issue Tracking

batflat のその他の脆弱性

• CVE-2021-27679中 5.4Cross-site scripting (XSS) vulnerability in Navigation in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML v…
• CVE-2021-27678中 5.4Cross-site scripting (XSS) vulnerability in Snippets in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2021-27677中 5.4Cross-site scripting (XSS) vulnerability in Galleries in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML vi…
• CVE-2020-35734高 7.2Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection (and consequently Remote Code Execution) via the input field…