Read the docs

Fabrikar

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Fabrikar records in CISA KEV

No Fabrikar vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Fabrik 2 records MEDIUM Com Fabrikar 1 record LOW

Records

4 records

TI-2020-19354 CVE-2020-37219 · GHSA-px6w-5x4g-ww8h

Joomla com_fabrik 3.9.11 Directory Traversal via image.php

Priority HIGH 77

Joomla com_fabrik 3.9.11 contains a directory traversal vulnerability that allows unauthenticated attackers to list arbitrary files by manipulating the folder parameter.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00716 Published 2026-05-13 No fix listed CWE-22
TI-2011-04286 CVE-2011-5004 · GHSA-vjhm-9rhf-h4x3

Unrestricted file upload vulnerability in models/importcsv.php in the Fabrik (com_fabrik)…

Priority LOW 30

Unrestricted file upload vulnerability in models/importcsv.php in the Fabrik (com_fabrik) component before 2.1.1 for Joomla! allows remote authenticated users with Manager privileges to execute arbitrary code by uploadin…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01653 Published 2011-12-25 No fix listed
TI-2018-07586 CVE-2018-10727 · GHSA-h88c-6cg3-vvc2

Reflected Cross-Site Scripting (XSS) vulnerability in the fabrik_referrer hidden field in…

Priority LOW 29

Reflected Cross-Site Scripting (XSS) vulnerability in the fabrik_referrer hidden field in the Fabrikar Fabrik component through v3.8.1 for Joomla! allows remote attackers to inject arbitrary web script via the HTTP Refer…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01056 Published 2019-10-29 No fix listed CWE-79
Open these records in search →