PT-2026-40620 · Fabrikar · Com Fabrik

Qw3Rtyty · Publicado 2026-05-13 · Atualizado 2026-05-13 · CVE-2020-37219

NVD

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Joomla com fabrik 3.9.11 contains a directory traversal vulnerability that allows unauthenticated attackers to list arbitrary files by manipulating the folder parameter. Attackers can send GET requests to the onAjax files method with path traversal sequences to enumerate files in system directories outside the intended web root.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2020-37219

Produtos afetados

Com Fabrik

Referências · 5

• 🔥 https://exploit-db.com/exploits/48263 · Exploit
• https://vulncheck.com/advisories/joomla-com-fabrik-directory-traversal-via-image-php · Nota
• https://fabrikar.com/downloads · Nota
• https://fabrikar.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-37219 · Nota de Segurança