CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Vulnrichment•added 2026/08/22 2:21 p.m.•13 views

CVE-2026-76602 Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik 4.7.2 - The order parameter in list models is used in queries without validation, allowing read SQLi vectors...

9.3CVSS5.8AI score0.00386EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2026/08/22 12:00 a.m.•6 views

CVE-2026-76602: Improper Neutralization of Special Elements used in an SQL Command

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik 4.7.2 - The order parameter in list models is used in queries without validation, allowing read SQLi vectors...

9.3CVSS5.8AI score0.00386EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by