Vulnerability Bulletins |
CVE-2026-76571 |
|
| Affected software | JOOMLA |
| Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.3 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery(). An unauthenticated attacker can supply arbitrary SQL through the filter condition, giving full read of the database. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-76571 | |