Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Fabrikar Clear all filters
TI-2020-19354 CVE-2020-37219 · GHSA-px6w-5x4g-ww8h

Joomla com_fabrik 3.9.11 Directory Traversal via image.php

Priority HIGH 77

Joomla com_fabrik 3.9.11 contains a directory traversal vulnerability that allows unauthenticated attackers to list arbitrary files by manipulating the folder parameter.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00716 Published 2026-05-13 No fix listed CWE-22
TI-2018-07586 CVE-2018-10727 · GHSA-h88c-6cg3-vvc2

Reflected Cross-Site Scripting (XSS) vulnerability in the fabrik_referrer hidden field in…

Priority LOW 29

Reflected Cross-Site Scripting (XSS) vulnerability in the fabrik_referrer hidden field in the Fabrikar Fabrik component through v3.8.1 for Joomla! allows remote attackers to inject arbitrary web script via the HTTP Refer…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01056 Published 2019-10-29 No fix listed CWE-79
TI-2011-04286 CVE-2011-5004 · GHSA-vjhm-9rhf-h4x3

Unrestricted file upload vulnerability in models/importcsv.php in the Fabrik (com_fabrik)…

Priority LOW 30

Unrestricted file upload vulnerability in models/importcsv.php in the Fabrik (com_fabrik) component before 2.1.1 for Joomla! allows remote authenticated users with Manager privileges to execute arbitrary code by uploadin…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01653 Published 2011-12-25 No fix listed