Read the docs

ordasoft.com

Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

ordasoft.com records in CISA KEV

No ordasoft.com vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Com Booklibrary 4 records LOW Book Library 2 records MEDIUM Joomla Cck 2 records MEDIUM Real Estate Manager 2 records MEDIUM Vehicle Manager 2 records MEDIUM Advertisement Board 1 record MEDIUM Com Medialibrary 1 record LOW Com Realestatemanager 1 record LOW

Records

2 records in Joomla Cck · all components

TI-2026-65395 CVE-2026-102427 · GHSA-v3vp-7jrj-hc66

Unrestricted file upload in ordasoft.com OrdaSoft Joomla CCK

Priority MEDIUM 51

Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader.php is reached through the component’s normal frontend routing (task=getContent), a task with no aut…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00932 Published 2026-09-30 No fix listed CWE-434
TI-2026-67746 CVE-2026-102428 · GHSA-ch52-jhqg-qhvj

Unauthenticated SQL injection in OrdaSoft Joomla CCK

Priority MEDIUM 48

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user provided and not properly validated, leading to a SQL injection vector.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00469 Published 2026-10-05 No fix listed CWE-89
Open these records in search →