CyberRota Analysis
AI-GeneratedThe Joomla extension from fabrikar.com is vulnerable to an unauthenticated SQL injection due to improper handling of the list filter condition parameter, allowing attackers to inject arbitrary SQL into the database query. This critical vulnerability enables unauthorized access to the entire database, potentially exposing sensitive information. Organizations using affected versions of the Fabrik extension should prioritize immediate remediation to mitigate the risk of data breaches.
Original NVD Description
Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2 - The condition parameter passed to a list filter is concatenated verbatim into the WHERE clause built by getFilterQuery(). An unauthenticated attacker can supply arbitrary SQL through the filter condition, giving full read of the database.