Unauthenticated attackers can execute arbitrary SQL queries against Bootstrapy CMS, posing a critical risk of database compromise and data exfiltration.

The application fails to properly sanitize user input in multiple modules, specifically the thread_id parameter in forum-thread.php, the subject parameter in contact-submit.php, and the post-id and thread-id parameters in post-new-submit.php. These vulnerabilities allow unauthenticated remote attackers to inject malicious SQL commands to extract data or disrupt services.

Successful exploitation grants an attacker the ability to interact directly with the backend database, leading to unauthorized access to sensitive user data, administrative credentials, or configuration information. Given the CVSS score of 8.2, this vulnerability represents a high-severity risk that could lead to significant data breaches, loss of customer trust, and operational downtime.

Immediate Action: As there is no official vendor patch available, administrators should immediately restrict access to the affected modules or disable the forum and contact components entirely until a secure version is released.

Proactive Monitoring: Security teams should review web server logs for anomalous POST requests containing SQL keywords like UNION, SELECT, or SLEEP, particularly targeting the identified PHP files.

Compensating Controls: Deploy a Web Application Firewall (WAF) with custom rules designed to detect and block SQL injection patterns in POST parameters to provide virtual patching for the vulnerable endpoints.

Public Exploit Available: Yes, a published proof-of-concept exists as detailed in the ExploitDB entry 46590.

Given the availability of public exploit code and the lack of a vendor-provided patch, this vulnerability presents an immediate and elevated risk to any instance of Bootstrapy CMS. Organizations must prioritize limiting exposure by disabling affected modules or placing the application behind robust WAF protections to mitigate the threat of unauthorized database access.