THREAT OPS › Threat News › [NVD] CVE-2026-76571 — Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.3 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery(). An unauthenticated attacker can supply
[NVD] CVE-2026-76571 — Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.3 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery(). An unauthenticated attacker can supply
CVE-2026-76571 CVSS: None Published: 2026-08-22T15:16:21.383
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.3 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery(). An unauthenticated attacker can supply arbitrary SQL through the filter condition, giving full r
Indicators of compromise
- CVE-2026-76571cve
- fabrikar.comdomain
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-76571