CVEvulnerability
CVE-2020-35734
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-02-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-94
Description
Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the Users tab. To exploit this, one must login to the administration panel and edit an arbitrary user's data (username, displayed name, etc.). NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Affected configurations
• batflat batflat 1.3.6
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://packetstormsecurity.com/files/161457/Batflat-CMS-1.3.6-Remote-Code-Execution.html Exploit, Third Party Advisory
- https://batflat.org/en/changelog Release Notes, Vendor Advisory
- https://github.com/sruupl/batflat/issues/98 Exploit, Third Party Advisory
- https://secator.pl/index.php/2021/02/15/batflat-v-1-3-6-authenticated-remote-code-execution-public-disclosure/ Exploit, Third Party Advisory
- http://packetstormsecurity.com/files/161457/Batflat-CMS-1.3.6-Remote-Code-Execution.html Exploit, Third Party Advisory
- https://batflat.org/en/changelog Release Notes, Vendor Advisory
- https://github.com/sruupl/batflat/issues/98 Exploit, Third Party Advisory
- https://secator.pl/index.php/2021/02/15/batflat-v-1-3-6-authenticated-remote-code-execution-public-disclosure/ Exploit, Third Party Advisory