CVE-2020-35734

Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the Users tab. To exploit this, one must login to the administration panel and edit an arbitrary user's data (username, displayed name, etc.). NOTE: This vulnerability only affects products that are no longer supported by the maintainer

• CWE-94

• http://packetstormsecurity.com/files/161457/Batflat-CMS-1.3.6-Remote-Code-Execution.htmlExploit, Third Party Advisory
• https://batflat.org/en/changelogRelease Notes, Vendor Advisory
• https://github.com/sruupl/batflat/issues/98Exploit, Third Party Advisory
• https://secator.pl/index.php/2021/02/15/batflat-v-1-3-6-authenticated-remote-code-execution-public-disclosure/Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/161457/Batflat-CMS-1.3.6-Remote-Code-Execution.htmlExploit, Third Party Advisory
• https://batflat.org/en/changelogRelease Notes, Vendor Advisory
• https://github.com/sruupl/batflat/issues/98Exploit, Third Party Advisory
• https://secator.pl/index.php/2021/02/15/batflat-v-1-3-6-authenticated-remote-code-execution-public-disclosure/Exploit, Third Party Advisory

Published

Feb 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-35727Reflected XSS in Quest Policy Authority 8.1.2.200 allows rem…5.4
• CVE-2020-35728FasterXML jackson-databind 2.x before 2.9.10.8 mishandles th…8.1
• CVE-2020-35729KLog Server 2.4.1 allows OS command injection via shell meta…9.8
• CVE-2020-3573Multiple vulnerabilities in Cisco Webex Network Recording Pl…7.8
• CVE-2020-35730An XSS issue was discovered in Roundcube Webmail before 1.2.…6.1
• CVE-2020-35733An issue was discovered in Erlang/OTP before 23.2.2. The ssl…7.5
• CVE-2020-35735Vidyo 02-09-/D allows clickjacking via the portal/ URI.4.7
• CVE-2020-35736GateOne 1.1 allows arbitrary file download without authentic…7.5
• CVE-2020-35737In Correspondence Management System (corms) in Newgen eGov 1…7.5
• CVE-2020-35738WavPack 5.3.0 has an out-of-bounds write in WavpackPackSampl…6.1
• CVE-2020-3574A vulnerability in the TCP packet processing functionality o…7.5
• CVE-2020-35740HGiga MailSherlock does not validate specific URL parameters…6.1