CVE-2026-76571: Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.3
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.3 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery(). An unauthenticated attacker can supply arbitrary SQL through the filter condition, giving full read of the database.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated attacker can exploit it by supplying SQL through the condition parameter of a list filter. No authenticated Joomla or Fabrik account is required according to the available information.
What data could be exposed?
The vulnerability allows arbitrary SQL to be injected into the WHERE clause generated by getFilterQuery(). The stated impact is full read access to the database.
Which versions need remediation?
Fabrik versions earlier than 4.7.3 are affected. Upgrade to 4.7.3 or a later version if available.