Skip to content
Threat Feed

Product

Forms Builder 2.0.6

1 brief RSS
high advisory

CVE-2021-47930: Balbooa Joomla Forms Builder Unauthenticated SQL Injection

Balbooa Joomla Forms Builder version 2.0.6 is vulnerable to unauthenticated SQL injection via POST requests to the com_baforms component, allowing remote attackers to execute arbitrary SQL queries and extract sensitive database information by manipulating the 'id' parameter in a JSON payload.

Forms Builder 2.0.6 +1 sql-injection joomla cve-2021-47930 web-application
2r 1t 1c