Vulnerabilidades en fabrikar.com
19 resultadosAnálisis Vexday
A Fabrikar apresenta um perfil de risco contido com apenas 1 vulnerabilidade crítica registrada, recentemente publicada nos últimos 90 dias, relacionada a execução de código arbitrário (CWE-94). Embora nenhuma exploração ativa seja conhecida no momento, a natureza crítica e a recência da falha justificam atenção imediata para mitigação.
CVE-2026-66915CRITICALJoomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.7.2EPSS 0.6%CVE-2026-67282CRITICALJoomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8EPSS 0.6%CVE-2026-76604CRITICALJoomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2EPSS 0.4%CVE-2026-76605CRITICALJoomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2EPSS 0.4%CVE-2026-76597HIGHJoomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.2EPSS 0.4%CVE-2026-76606CRITICALJoomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2EPSS 0.3%CVE-2026-76598HIGHJoomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2EPSS 0.3%CVE-2026-76608MEDIUMJoomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.2EPSS 0.3%CVE-2026-76601MEDIUMJoomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.2EPSS 0.3%CVE-2026-76599HIGHJoomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.2EPSS 0.3%CVE-2026-76571CRITICALJoomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2EPSS 0.3%CVE-2026-77992CRITICALJoomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2EPSS 0.3%CVE-2026-77027HIGHJoomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2EPSS 0.3%CVE-2026-76602CRITICALJoomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2EPSS 0.2%CVE-2026-76607CRITICALJoomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2EPSS 0.2%CVE-2026-76596HIGHJoomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2EPSS 0.2%CVE-2026-76600MEDIUMJoomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.2EPSS 0.2%CVE-2026-76603MEDIUMJoomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.2EPSS 0.2%CVE-2026-76609MEDIUMJoomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2EPSS 0.2%