Ordasoft
-
CVE-2026-100752
Joomla Extension – ordasoft.com – Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 - site/realestatemanager.php builds the ORDER BY clause…
-
CVE-2026-101108
Joomla Extension – ordasoft.com – Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 - site/vehiclemanager.php reads the order_field and order_direction sort…
-
CVE-2026-101110
Joomla Extension – ordasoft.com – Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 - site/booklibrary.php’s books() function reads the field and…
-
CVE-2026-102427
Joomla Extension – ordasoft.com – Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader.php is reached through the component’s…
-
CVE-2026-102428
Joomla Extension – ordasoft.com – Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user…