Read the docs

ordasoft.com

Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

ordasoft.com records in CISA KEV

No ordasoft.com vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Com Booklibrary 4 records LOW Book Library 2 records MEDIUM Joomla Cck 2 records MEDIUM Real Estate Manager 2 records MEDIUM Vehicle Manager 2 records MEDIUM Advertisement Board 1 record MEDIUM Com Medialibrary 1 record LOW Com Realestatemanager 1 record LOW

Records

2 records in Vehicle Manager · all components

TI-2026-65133 CVE-2026-101108 · GHSA-5695-wvhx-jxj8

SQL injection in ordasoft.com Vehicle Manager extension for Joomla

Priority MEDIUM 48

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 - site/vehiclemanager.php reads the order_field and order_direction sort parameters at three separate anonymous-reachable…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00319 Published 2026-09-28 No fix listed CWE-89
TI-2026-65134 CVE-2026-101109 · GHSA-hmp2-w6r9-h3f2

Cross-site scripting in ordasoft.com Vehicle Manager extension for Joomla

Priority LOW 23

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8 - The public vehicle-detail page (task=view) echoes the title request parameter directly into a double-quoted HTML attrib…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00149 Published 2026-09-28 No fix listed CWE-79
Open these records in search →