Fabrik
by Joomla
CVEs (17)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-76607 | Cri | 0.65 | — | 0.00 | Aug 22, 2026 | Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2. | ||
| CVE-2026-76606 | Cri | 0.65 | — | 0.01 | Aug 22, 2026 | Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2. | ||
| CVE-2026-67282 | Cri | 0.65 | — | 0.01 | Aug 12, 2026 | Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 - An unauthenticated attacker could execute arbitrary code by using the frontend listfilter model. | ||
| CVE-2026-66915 | Cri | 0.65 | — | 0.01 | Aug 10, 2026 | Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.7.2 - An unauthenticated attacker could execute arbitrary code by using the ajax_calc feature of the calc plugin. | ||
| CVE-2026-77992 | Cri | 0.62 | — | 0.00 | Aug 22, 2026 | Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks. | ||
| CVE-2026-76571 | Cri | 0.60 | — | 0.00 | Aug 22, 2026 | Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery(). An unauthenticated attacker can supply… | ||
| CVE-2026-76599 | Hig | 0.57 | — | 0.00 | Aug 22, 2026 | Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2 - The ajax_tables method of the elements model allows listings of arbitrary database tables including columns. | ||
| CVE-2026-76598 | Hig | 0.57 | — | 0.00 | Aug 22, 2026 | Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2 - The onAjax_getFolders method of the elements model allows arbitrary directory listings. | ||
| CVE-2026-76597 | Hig | 0.57 | — | 0.00 | Aug 22, 2026 | Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2 - The list email plugin controller allows to upload non-executable files to the webroot. | ||
| CVE-2026-76596 | Hig | 0.57 | — | 0.00 | Aug 22, 2026 | Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2- The list controllers doemtpy endpoints lacks ACL gates, a plain GET empties the target list's table | ||
| CVE-2026-77027 | Hig | 0.56 | — | 0.00 | Aug 22, 2026 | Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handling of user supplied input in the jsactions feature leads to an stored XSS vector. | ||
| CVE-2026-76609 | Med | 0.45 | — | 0.00 | Aug 22, 2026 | Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks. | ||
| CVE-2026-76608 | Med | 0.45 | — | 0.00 | Aug 22, 2026 | Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2 - The onGetEmail endpoint did not perform any access checks. | ||
| CVE-2026-76603 | Med | 0.45 | — | 0.00 | Aug 22, 2026 | Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2 - The inineedit form controller does not perform any access checks, disclosing items to unauthorized users. | ||
| CVE-2026-76601 | Med | 0.45 | — | 0.00 | Aug 22, 2026 | Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2 - The order plugin did not perform any access checks. | ||
| CVE-2026-76600 | Med | 0.45 | — | 0.00 | Aug 22, 2026 | Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2 - The DeleteComment endpoint did not perform any access checks. | ||
| CVE-2010-1981 | 0.04 | — | 0.12 | May 19, 2010 | Directory traversal vulnerability in the Fabrik (com_fabrik) component 2.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. |
- risk 0.65cvss —epss 0.00
Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2.
- risk 0.65cvss —epss 0.01
Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2.
- risk 0.65cvss —epss 0.01
Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 - An unauthenticated attacker could execute arbitrary code by using the frontend listfilter model.
- risk 0.65cvss —epss 0.01
Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.7.2 - An unauthenticated attacker could execute arbitrary code by using the ajax_calc feature of the calc plugin.
- risk 0.62cvss —epss 0.00
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks.
- risk 0.60cvss —epss 0.00
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery(). An unauthenticated attacker can supply…
- risk 0.57cvss —epss 0.00
Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2 - The ajax_tables method of the elements model allows listings of arbitrary database tables including columns.
- risk 0.57cvss —epss 0.00
Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2 - The onAjax_getFolders method of the elements model allows arbitrary directory listings.
- risk 0.57cvss —epss 0.00
Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2 - The list email plugin controller allows to upload non-executable files to the webroot.
- risk 0.57cvss —epss 0.00
Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2- The list controllers doemtpy endpoints lacks ACL gates, a plain GET empties the target list's table
- risk 0.56cvss —epss 0.00
Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handling of user supplied input in the jsactions feature leads to an stored XSS vector.
- risk 0.45cvss —epss 0.00
Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks.
- risk 0.45cvss —epss 0.00
Joomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2 - The onGetEmail endpoint did not perform any access checks.
- risk 0.45cvss —epss 0.00
Joomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2 - The inineedit form controller does not perform any access checks, disclosing items to unauthorized users.
- risk 0.45cvss —epss 0.00
Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2 - The order plugin did not perform any access checks.
- risk 0.45cvss —epss 0.00
Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2 - The DeleteComment endpoint did not perform any access checks.
- CVE-2010-1981May 19, 2010risk 0.04cvss —epss 0.12
Directory traversal vulnerability in the Fabrik (com_fabrik) component 2.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.