CVE-2021-47930
HIGHBalbooa Joomla Forms Builder 2.0.6 SQL Injection Unauthenticated
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2021-47930. PoCs published by blockomat2100.
AI-analyzed exploit summary This is a functional SQL injection exploit for Balbooa Joomla Forms Builder 2.0.6, demonstrating an unauthenticated attack via a crafted multipart/form-data POST request. The exploit injects SQL payloads into the 'id' field of the JSON data submitted to the vulnerable endpoint.
Description
Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission handler that allows remote attackers to execute arbitrary SQL queries. Attackers can send POST requests to the com_baforms component with malicious JSON payloads in the 'id' field parameter to extract sensitive database information.
Exploits (1)
This is a functional SQL injection exploit for Balbooa Joomla Forms Builder 2.0.6, demonstrating an unauthenticated attack via a crafted multipart/form-data POST request. The exploit injects SQL payloads into the 'id' field of the JSON data submitted to the vulnerable endpoint.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N