OrdaSoft Joomla Gallery free extension for Joomla vulnerabilities
4 known vulnerabilities in OrdaSoft Joomla Gallery free extension for Joomla from OrdaSoft.com. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.4 Critical severity
OrdaSoft Joomla Gallery free extension for…: Unrestricted Upload of File with Dangerous Type
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveWatermark() copied an uploaded file into a web-accessible directory using the client-supplied filenam
- 9.4 Critical severity
OrdaSoft Joomla Gallery free extension for…: Improper Control of Generation of Code
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions updateOSGallery(), reached via task=update_osgallery, read a JSON request body and called the value of a
- 8.6 High severity
OrdaSoft Joomla Gallery free extension for…: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveGallery() passes form data through a hand-rolled parser into Joomla’s Input object, then reads it back with t
- 9.3 Critical severity
OrdaSoft Joomla Gallery free extension for…: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions showSearchResult() and showSearchResultAjax() read the textsearch/searchText request parameter with $input->getVar(), which