Fabrik extension for Joomla vulnerabilities
11 known vulnerabilities in Fabrik extension for Joomla from Fabrikar.com. 11 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.5 Critical severity
Fabrik extension for Joomla: Improper Control of Generation of Code
Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2 - The onUpdateComment endpoint did not perform any access checks.
- 8.6 High severity
Fabrik extension for Joomla: Improper Neutralization of Input During Web Page Generation
Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 - The handling of user supplied input in the jsactions feature leads to an stored XSS vector.
- 10.0 Critical severity
Fabrik extension for Joomla: Improper Control of Generation of Code
Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2 - The PHP form element is vulnerable to the execution of user provided codes.
- 9.3 Critical severity
Fabrik extension for Joomla: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2 - The order parameter in list models is used in queries without validation, allowing read SQLi vectors.
- 8.7 High severity
Fabrik extension for Joomla: Improper Access Control
Joomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2 - The ajax_tables method of the elements model allows listings of arbitrary database tables including columns.
- 8.7 High severity
Fabrik extension for Joomla: Improper Limitation of a Pathname to a Restricted Directory
Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2 - The onAjax_getFolders method of the elements model allows arbitrary directory listings.
- 8.7 High severity
Fabrik extension for Joomla: Improper Access Control
Joomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2 - The list email plugin controller allows to upload non-executable files to the webroot.
- 8.7 High severity
Fabrik extension for Joomla: Improper Access Control
Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2- The list controllers doemtpy endpoints lacks ACL gates, a plain GET empties the target list's table
- 9.3 Critical severity
Fabrik extension for Joomla: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery(). An unauthenticated
- 10.0 Critical severity
Fabrik extension for Joomla: Improper Control of Generation of Code
Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 - An unauthenticated attacker could execute arbitrary code by using the frontend listfilter model.
- 10.0 Critical severity
Fabrik extension for Joomla: Improper Control of Generation of Code
Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.7.2 - An unauthenticated attacker could execute arbitrary code by using the ajax_calc feature of the calc plugin.