PT-2026-40620 · Fabrikar · Com Fabrik

Qw3Rtyty · Published 2026-05-13 · Updated 2026-05-13 · CVE-2020-37219

NVD

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Joomla com fabrik 3.9.11 contains a directory traversal vulnerability that allows unauthenticated attackers to list arbitrary files by manipulating the folder parameter. Attackers can send GET requests to the onAjax files method with path traversal sequences to enumerate files in system directories outside the intended web root.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-37219

Affected Products

Com Fabrik

References · 5

• 🔥 https://exploit-db.com/exploits/48263 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37219 · Security Note
• https://vulncheck.com/advisories/joomla-com-fabrik-directory-traversal-via-image-php · Note
• https://fabrikar.com/downloads · Note
• https://fabrikar.com · Note