CVE-2026-102425

CVE-2026-102425 — Balbooa Forms combaforms 字段短代码 → RCE 针对 CVE-2026-102425 的 Python 3 PoC —— balbooa.com Balbooa Forms Joomla 扩展 —— 通过可选 提交后 PHP 操作（eval）中的 字段短代码注入 实现 未认证远程代码执行 。 | | | |---|---| | PoCbit | https://pocbit.org/pocs/cve-2026-102425 | | CVE.org | https://vulners.com/cve/CVE-2026-10242...

CVE-2026-102425

🖥️ BAForms-RCE — CVE-2026-102425 GUI 暗色霓虹 GUI 扫描器/漏洞利用工具，针对 CVE-2026-102425 — Balbooa Forms combaforms 1.0.0–2.4.3.3：通过字段短代码注入在 PHP-after-submission 动作中实现未认证 RCE （eval）。 独立 GUI 实现 — 根据官方公告中公开的机制从零重写。 并非其他方的 CLI 封装。 | ---|--- CVE| CVE-2026-102425 PUBLISHED 2026-09-29, CNA: Joomla! Project NVD|...

The vulnerability of the com_baforms component of the Balbooa Forms extension in the Joomla content management system allows a hacker to execute arbitrary code.

The vulnerability of the combaforms component of the Balbooa Forms extension in the Joomla content management system involves unlimited loading of dangerous files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

EUVD-2021-34792

Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission handler that allows remote attackers to execute arbitrary SQL queries. Attackers can send POST requests to the combaforms component with malicious JSON payloads in the 'id' field...

CVE-2021-47930

Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission handler that allows remote attackers to execute arbitrary SQL queries. Attackers can send POST requests to the combaforms component with malicious JSON payloads in the 'id' field...

CVE-2021-47930

Balbooa Joomla Forms Builder 2.0.6 is affected by an unauthenticated SQL injection in the form submission handler. The vulnerability can be triggered by sending POST requests to the com_baforms component with malicious JSON payloads in the 'id' field, enabling remote attackers to extract sensitiv...

Balbooa Joomla Forms Builder SQL注入漏洞

Balbooa Joomla Forms Builder is a website form building plugin provided by Balbooa Corporation, which offers visual form design and data collection features. Version 2.0.6 of Balbooa Joomla Forms Builder contains an SQL injection vulnerability. This vulnerability stems from an unauthenticated SQL...

CVE-2021-47930: Improper Neutralization of Special Elements used in an SQL Command

Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission handler that allows remote attackers to execute arbitrary SQL queries. Attackers can send POST requests to the combaforms component with malicious JSON payloads in the 'id' field...

PT-2026-39506

Name of the Vulnerable Software and Affected Versions Balbooa Joomla Forms Builder version 2.0.6 Description An unauthenticated SQL injection exists in the form submission handler, allowing remote attackers to execute arbitrary SQL queries. This is achieved by sending POST requests to the 'com...