CVE-2026-56291

This exploit targets CVE-2026-56291, a pre-authentication remote code execution vulnerability in Balbooa Forms Joomla extension. It abuses the `form.uploadAttachmentFile` endpoint to upload a malicious PHP webshell by bypassing file type restrictions.

The repository contains a placeholder markdown file for CVE-2026-56291, describing an unauthenticated arbitrary file upload vulnerability in the Balbooa Forms Joomla extension (< 2.4.1) leading to RCE. However, no functional exploit code or technical details are provided.

This repository contains a functional exploit for CVE-2026-56291, an unauthenticated arbitrary PHP file upload vulnerability in Balbooa Forms Joomla component (< 2.4.1). The exploit leverages the `form.uploadAttachmentFile` task to upload malicious PHP files and achieve remote code execution (RCE).

This YAML file is a Nuclei template designed to detect the presence of Balbooa Forms Joomla component (com_baforms) and extract version information. It does not exploit the vulnerability but identifies targets vulnerable to CVE-2026-56291, an unauthenticated arbitrary PHP file upload leading to RCE.

This repository contains a functional exploit for CVE-2026-56291, a pre-authentication arbitrary file upload vulnerability in Balbooa Forms Joomla extension (< 2.4.1). The exploit leverages the unprotected `form.uploadAttachmentFile` task to upload PHP shells and achieve remote code execution (RCE).

This repository contains a functional exploit for CVE-2026-56291, an unauthenticated arbitrary PHP file upload vulnerability in Balbooa Forms Joomla component (< 2.4.1). The exploit leverages the `form.uploadAttachmentFile` task to upload malicious PHP files and achieve remote code execution (RCE).