CVE-2011-5004

Published: Dec 25, 2011Modified: Apr 29, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

Unrestricted file upload vulnerability in models/importcsv.php in the Fabrik (com_fabrik) component before 2.1.1 for Joomla! allows remote authenticated users with Manager privileges to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.

Affected (6)

Products: Fabrikar: Com Fabrikar

Fabrikar

1 product

Com Fabrikar

Configuration A

6 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Fabrikar Com Fabrikar	Up to 2.1
Fabrikar Com Fabrikar	Version 1.0.1
Fabrikar Com Fabrikar	Version 1.0.6
Fabrikar Com Fabrikar	Version 2.0.2
Fabrikar Com Fabrikar	Version 2.0.4
Fabrikar Com Fabrikar	Version 2.0.5