Fabrikar : Security Vulnerabilities, CVEs, CVSS score >= 3
Reflected Cross-Site Scripting (XSS) vulnerability in the fabrik_referrer hidden field in the Fabrikar Fabrik component through v3.8.1 for Joomla! allows remote attackers to inject arbitrary web script via the HTTP Referer header.
Max CVSS
6.1
EPSS Score
0.13%
Published
2019-10-29
Updated
2019-10-31
Unrestricted file upload vulnerability in models/importcsv.php in the Fabrik (com_fabrik) component before 2.1.1 for Joomla! allows remote authenticated users with Manager privileges to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.
Max CVSS
6.0
EPSS Score
0.74%
Published
2011-12-25
Updated
2012-02-17
Directory traversal vulnerability in the Fabrik (com_fabrik) component 2.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
Max CVSS
6.8
EPSS Score
0.66%
Published
2010-05-19
Updated
2022-04-22
3 vulnerabilities found