Read the docs

ordasoft.com

Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

ordasoft.com records in CISA KEV

No ordasoft.com vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Com Booklibrary 4 records LOW Book Library 2 records MEDIUM Joomla Cck 2 records MEDIUM Real Estate Manager 2 records MEDIUM Vehicle Manager 2 records MEDIUM Advertisement Board 1 record MEDIUM Com Medialibrary 1 record LOW Com Realestatemanager 1 record LOW

Records

2 records in Book Library · all components

TI-2026-65135 CVE-2026-101110 · GHSA-hv58-qqxr-w5r2

SQL injection in ordasoft.com Book Library extension for Joomla

Priority MEDIUM 48

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 - site/booklibrary.php’s books() function reads the field and direction request parameters and passes each through a function…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00319 Published 2026-09-28 No fix listed CWE-89
TI-2026-65136 CVE-2026-101111 · GHSA-6cm5-gmw8-jj23

Cross-site scripting in ordasoft.com Book Library extension for Joomla

Priority LOW 29

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6 - The public book-detail page template, site/views/view_book/tmpl/default.php, echoes the raw title request parameter direct…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00149 Published 2026-09-28 No fix listed CWE-79
Open these records in search →