Ordasoft.com
14 CVEs in 8 Ordasoft.com products, including Ordasoft Joomla Gallery Extension For Joomla, Ordasoft Joomla Gallery Free Extension For Joomla, Book Librar…
Ordasoft.com products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-102782 | | 2026-10-07 | Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0 - site/simplemembership.php dispatches task=checkLoginPas… | |
CVE-2026-102781 | | 2026-10-07 | Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6 - modOsTouchSliderHelper::getAjax(), wired through Joomla’s… | |
CVE-2026-102428 | Critical | 9.8 | 2026-10-05 | Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user provided and not proper… |
CVE-2026-102427 | Critical | 10.0 | 2026-09-30 | Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader.php is reached through the component’s… |
CVE-2026-101111 | Medium | 6.1 | 2026-09-28 | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6 - The public book-detail page template, site/views/view_book/tm… |
CVE-2026-101110 | Critical | 9.8 | 2026-09-28 | Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 - site/booklibrary.php’s books() function reads the field and di… |
CVE-2026-101109 | Medium | 6.1 | 2026-09-28 | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8 - The public vehicle-detail page (task=view) echoes the titl… |
CVE-2026-101108 | Critical | 9.8 | 2026-09-28 | Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 - site/vehiclemanager.php reads the order_field and order_dir… |
CVE-2026-100753 | Medium | 6.1 | 2026-09-28 | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7.9 - The public property-detail page’s “leave a review” fo… |
CVE-2026-100752 | Critical | 9.8 | 2026-09-28 | Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 - site/realestatemanager.php builds the ORDER BY clause o… |
CVE-2026-88857 | | 2026-09-20 | Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions save… | |
CVE-2026-88856 | | 2026-09-20 | Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions upda… | |
CVE-2026-88855 | | 2026-09-20 | Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveGallery(… | |
CVE-2026-88854 | | 2026-09-20 | Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions showSearchResult() and… |