Advisories · Technology
fabrikar.com Fabrik extension for Joomla.
Every CVE that names fabrikar.com Fabrik extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 10.0 CriticalCritical · CVSS 9+
Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2
- fabrikar.com Fabrik extension for Joomla
- Path traversal
- CVSS 8.6 High
Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2
- fabrikar.com Fabrik extension for Joomla
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2
- fabrikar.com Fabrik extension for Joomla
- SQL injection
- CVSS 6.9 Medium
Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2
- fabrikar.com Fabrik extension for Joomla
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2
- fabrikar.com Fabrik extension for Joomla
- SQL injection
- CVSS 8.7 High
Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2
- fabrikar.com Fabrik extension for Joomla
- Broken access control
- CVSS 8.7 High
Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2
- fabrikar.com Fabrik extension for Joomla
- Path traversal
- Broken access control
- CVSS 10.0 CriticalCritical · CVSS 9+
Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2
- fabrikar.com Fabrik extension for Joomla
- Code injection
- CVSS 8.7 High
Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2
- fabrikar.com Fabrik extension for Joomla
- Broken access control
- CVSS 9.5 CriticalCritical · CVSS 9+
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2
- fabrikar.com Fabrik extension for Joomla
- Code injection
- CVSS 6.9 Medium
Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2
- fabrikar.com Fabrik extension for Joomla
- Broken access control
- CVSS 10.0 CriticalCritical · CVSS 9+
Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2
- fabrikar.com Fabrik extension for Joomla
- Code injection
- CVSS 10.0 CriticalCritical · CVSS 9+
Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2
- fabrikar.com Fabrik extension for Joomla
- Broken access control
- CVSS 6.9 Medium
Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2
- fabrikar.com Fabrik extension for Joomla
- Broken access control
- CVSS 6.9 Medium
Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2
- fabrikar.com Fabrik extension for Joomla
- Broken access control
- CVSS 8.7 High
Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2
- fabrikar.com Fabrik extension for Joomla
- Broken access control
- CVSS 6.9 Medium
Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2
- fabrikar.com Fabrik extension for Joomla
- Broken access control
- CVSS 10.0 CriticalCritical · CVSS 9+
Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8
- fabrikar.com Fabrik extension for Joomla
- Code injection
- CVSS 10.0 CriticalCritical · CVSS 9+
Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.7.2
- fabrikar.com Fabrik extension for Joomla
- Code injection