Boletines de Vulnerabilidades

CVE-2026-76602

   
Software afectado JOOMLA
 
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.3 - The order parameter in list models is used in queries without validation, allowing read SQLi vectors.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-76602