Batflat

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Batflat records in CISA KEV

No Batflat vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Batflat 5 records MEDIUM

Records

5 records

TI-2020-18191 CVE-2020-35734 · GHSA-2wjg-24qc-pq5v

Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection (and…

MEDIUM 43

Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the Users tab.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.06772 Published 2021-02-15 No fix listed CWE-94

TI-2021-18356 CVE-2021-41652 · GHSA-398x-qm59-5hfg

Insecure permissions in the file database.sdb of BatFlat CMS v1.3.6 allows attackers to dump the entire database.

LOW 35

Insecure permissions in the file database.sdb of BatFlat CMS v1.3.6 allows attackers to dump the entire database.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0107 Published 2022-03-01 No fix listed CWE-276

TI-2021-09122 CVE-2021-27679 · GHSA-8gcc-2crw-4f76

Cross-site scripting (XSS) vulnerability in Navigation in Batflat CMS 1.3.6 allows remote…

LOW 25

Cross-site scripting (XSS) vulnerability in Navigation in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the field name.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2021-03-11 No fix listed CWE-79

TI-2021-09121 CVE-2021-27678 · GHSA-j78r-xc8f-6mvw

Cross-site scripting (XSS) vulnerability in Snippets in Batflat CMS 1.3.6 allows remote…

LOW 25

Cross-site scripting (XSS) vulnerability in Snippets in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the field name.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2021-03-11 No fix listed CWE-79

TI-2021-09120 CVE-2021-27677 · GHSA-fw2g-6rwm-6hw8

Cross-site scripting (XSS) vulnerability in Galleries in Batflat CMS 1.3.6 allows remote…

LOW 25

Cross-site scripting (XSS) vulnerability in Galleries in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the field name.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2021-03-11 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	3
Low	0
No CVSS	0