Insecure permissions in the file database.sdb of BatFlat CMS v1.3.6 allows attackers to dump the entire database.