Read the docs

ordasoft.com

Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

ordasoft.com records in CISA KEV

No ordasoft.com vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Com Booklibrary 4 records LOW Book Library 2 records MEDIUM Joomla Cck 2 records MEDIUM Real Estate Manager 2 records MEDIUM Vehicle Manager 2 records MEDIUM Advertisement Board 1 record MEDIUM Com Medialibrary 1 record LOW Com Realestatemanager 1 record LOW

Records

2 records in Real Estate Manager · all components

TI-2026-64893 CVE-2026-100752 · GHSA-rfcm-hchc-h7rw

SQL injection in ordasoft.com Real Estate Manager extension for Joomla

Priority MEDIUM 48

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 - site/realestatemanager.php builds the ORDER BY clause of three separate frontend property-listing queries (category…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00319 Published 2026-09-28 No fix listed CWE-89
TI-2026-64894 CVE-2026-100753 · GHSA-rm64-rq7m-j69j

Cross-site scripting in ordasoft.com Real Estate Manager extension for Joomla

Priority LOW 29

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7.9 - The public property-detail page’s “leave a review” form repopulates its title field directly from the request with…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00149 Published 2026-09-28 No fix listed CWE-79
Open these records in search →