Fabrikar vulnerabilities
Published CVEs affecting Fabrikar products: 1 record(s), with severity, exploitation and fixes.
CVE-2020-37219
High · 7.5
CWE-22 May 13, 2026
Joomla com_fabrik 3.9.11 Directory Traversal via image.php
Joomla com_fabrik 3.9.11 contains a directory traversal vulnerability that allows unauthenticated attackers to list arbitrary files by manipulating the folder parameter. Attackers can send GET requests to the onAjax_files method with path traversal sequences to enumerate files in system directories outside the intended web root.