Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: ordasoft.com Component: Joomla Cck Clear all filters
TI-2026-67746 CVE-2026-102428 · GHSA-ch52-jhqg-qhvj

Unauthenticated SQL injection in OrdaSoft Joomla CCK

Priority MEDIUM 48

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user provided and not properly validated, leading to a SQL injection vector.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00469 Published 2026-10-05 No fix listed CWE-89
TI-2026-65395 CVE-2026-102427 · GHSA-v3vp-7jrj-hc66

Unrestricted file upload in ordasoft.com OrdaSoft Joomla CCK

Priority MEDIUM 51

Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader.php is reached through the component’s normal frontend routing (task=getContent), a task with no aut…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00932 Published 2026-09-30 No fix listed CWE-434