OrdaSoft.com vulnerabilities
We track 10 vulnerabilities in OrdaSoft.com products across 7 products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on October 7, 2026.
Latest OrdaSoft.com vulnerabilities
- 9.3 Critical severity
OrdaSoft Simple Membership extension for Joomla: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0 - site/simplemembership.php dispatches task=checkLoginPass with no authentication or access control check of any kind. The handler reads a login request param
- 9.8 Critical severity
OrdaSoft Joomla CCK: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user provided and not properly validated, leading to a SQL injection vector.
- 10.0 Critical severity
OrdaSoft Joomla CCK: Unrestricted Upload of File with Dangerous Type
Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader.php is reached through the component’s normal frontend routing (task=getContent), a task with no authentication or ACL check anywhere in the
- 9.8 Critical severity
Book Library (Free) extension for Joomla: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 - site/booklibrary.php’s books() function reads the field and direction request parameters and passes each through a function called protectInjectionWithoutQuote(),
- 9.8 Critical severity
Vehicle Manager (Free) extension for Joomla: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 - site/vehiclemanager.php reads the order_field and order_direction sort parameters at three separate anonymous-reachable frontend entry points (category listing,
- 9.8 Critical severity
Real Estate Manager (Free) extension for Joomla: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 - site/realestatemanager.php builds the ORDER BY clause of three separate frontend property-listing queries (category browsing, search results, and the full p
- 9.4 Critical severity
OrdaSoft Joomla Gallery free extension for…: Unrestricted Upload of File with Dangerous Type
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveWatermark() copied an uploaded file into a web-accessible directory using the client-supplied filenam
- 9.4 Critical severity
OrdaSoft Joomla Gallery free extension for…: Improper Control of Generation of Code
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions updateOSGallery(), reached via task=update_osgallery, read a JSON request body and called the value of a
- 8.6 High severity
OrdaSoft Joomla Gallery free extension for…: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveGallery() passes form data through a hand-rolled parser into Joomla’s Input object, then reads it back with t
- 9.3 Critical severity
OrdaSoft Joomla Gallery free extension for…: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions showSearchResult() and showSearchResultAjax() read the textsearch/searchText request parameter with $input->getVar(), which