ordasoft records

17 published records for vendor ordasoft.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 8
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

17 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2018-5971Proof of concept	SQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter or the mid array parameter.ordasoft · medialibrary · CWE-89 Pre-auth SQL injection	Critical9.8	—	2.6%	Feb 17, 2018
40Plan	CVE-2018-5982Proof of concept	SQL Injection exists in the Advertisement Board 3.1.0 component for Joomla! via a task=show_rss_categories&catname= request.ordasoft · advertisement board · CWE-89 Pre-auth SQL injection	Critical9.8	—	2.6%	Feb 17, 2018
40Plan	CVE-2026-102427Proof of concept	Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16ordasoft · joomla cck · CWE-434 pre-auth RCE File upload	Critical10.0	—	0.9%	Sep 30, 2026
37Monitor	CVE-2026-102428Proof of concept	Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16ordasoft · joomla cck · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.4%	Oct 5, 2026
37Monitor	CVE-2026-100752Proof of concept	Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9ordasoft · real estate manager · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.3%	Sep 28, 2026
37Monitor	CVE-2026-101108Proof of concept	Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8ordasoft · vehicle manager · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.3%	Sep 28, 2026
37Monitor	CVE-2026-101110Proof of concept	Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6ordasoft · book library · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.3%	Sep 28, 2026
31Monitor	CVE-2009-3817Proof of concept	PHP remote file inclusion vulnerability in doc/releasenote.php in the BookLibrary (com_booklibrary) component 1.0 for Joomla! allows remote joomla · joomla\! · CWE-94 pre-auth RCE	High7.5	—	2.5%	Oct 28, 2009
31Monitor	CVE-2009-2637Proof of concept	PHP remote file inclusion vulnerability in toolbar_ext.php in the BookLibrary (com_booklibrary) component 1.5.2.4 Basic for Joomla! allows rjoomla · joomla · CWE-94 pre-auth RCE	High7.5	—	2.2%	Jul 28, 2009
31Monitor	CVE-2009-2633Proof of concept	PHP remote file inclusion vulnerability in toolbar_ext.php in the VehicleManager (com_vehiclemanager) component 1.0 Basic for Joomla! allowsjoomla · joomla · CWE-94 pre-auth RCE	High7.5	—	2.0%	Jul 28, 2009
31Monitor	CVE-2009-2635Proof of concept	PHP remote file inclusion vulnerability in toolbar_ext.php in the RealEstateManager (com_realestatemanager) component 1.0 Basic for Joomla! joomla · joomla · CWE-94 pre-auth RCE	High7.5	—	2.0%	Jul 28, 2009
31Monitor	CVE-2009-2634Proof of concept	PHP remote file inclusion vulnerability in toolbar_ext.php in the MediaLibrary (com_media_library) component 1.5.3 Basic for Joomla! allows joomla · joomla · CWE-94 pre-auth RCE	High7.5	—	2.0%	Jul 28, 2009
30Monitor	CVE-2010-1522No exploit	Multiple SQL injection vulnerabilities in the BookLibrary Basic (com_booklibrary) component 1.5.3 before 1.5.3_2010_06_20 for Joomla! allow joomla · joomla\! · CWE-89 pre-auth RCE SQL injection	High7.5	—	1.3%	Jul 2, 2010
30Monitor	CVE-2010-2851No exploit	SQL injection vulnerability in the BookLibrary From Same Author (com_booklibrary) module 1.5 and possibly earlier for Joomla! allows remote joomla · joomla\! · CWE-89 pre-auth RCE SQL injection	High7.5	—	1.2%	Jul 24, 2010
21Monitor	CVE-2026-101109No exploit	Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8ordasoft · vehicle manager · CWE-79 Pre-auth XSS	Medium5.3	—	0.1%	Sep 28, 2026
21Monitor	CVE-2026-101111No exploit	Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6ordasoft · book library · CWE-79 Pre-auth XSS	Medium5.3	—	0.1%	Sep 28, 2026
21Monitor	CVE-2026-100753No exploit	Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7.9ordasoft · real estate manager · CWE-79 Pre-auth XSS	Medium5.3	—	0.1%	Sep 28, 2026

CVE-2018-5971
40Plan
SQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter or the mid array parameter.
CriticalCVSS 9.8Proof of conceptEPSS 2%
- Pre-auth
- SQL injection
ordasoft · medialibraryFeb 17, 2018
CVE-2018-5982
40Plan
SQL Injection exists in the Advertisement Board 3.1.0 component for Joomla! via a task=show_rss_categories&catname= request.
CriticalCVSS 9.8Proof of conceptEPSS 2%
- Pre-auth
- SQL injection
ordasoft · advertisement boardFeb 17, 2018
CVE-2026-102427
40Plan
Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16
CriticalCVSS 10.0Proof of conceptEPSS 0%
- pre-auth RCE
- File upload
ordasoft · joomla cckSep 30, 2026
CVE-2026-102428
37Monitor
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16
CriticalCVSS 9.3Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
ordasoft · joomla cckOct 5, 2026
CVE-2026-100752
37Monitor
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9
CriticalCVSS 9.3Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
ordasoft · real estate managerSep 28, 2026
CVE-2026-101108
37Monitor
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8
CriticalCVSS 9.3Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
ordasoft · vehicle managerSep 28, 2026
CVE-2026-101110
37Monitor
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6
CriticalCVSS 9.3Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
ordasoft · book librarySep 28, 2026
CVE-2009-3817
31Monitor
PHP remote file inclusion vulnerability in doc/releasenote.php in the BookLibrary (com_booklibrary) component 1.0 for Joomla! allows remote
HighCVSS 7.5Proof of conceptEPSS 2%
- pre-auth RCE
joomla · joomla\!Oct 28, 2009
CVE-2009-2637
31Monitor
PHP remote file inclusion vulnerability in toolbar_ext.php in the BookLibrary (com_booklibrary) component 1.5.2.4 Basic for Joomla! allows r
HighCVSS 7.5Proof of conceptEPSS 2%
- pre-auth RCE
joomla · joomlaJul 28, 2009
CVE-2009-2633
31Monitor
PHP remote file inclusion vulnerability in toolbar_ext.php in the VehicleManager (com_vehiclemanager) component 1.0 Basic for Joomla! allows
HighCVSS 7.5Proof of conceptEPSS 2%
- pre-auth RCE
joomla · joomlaJul 28, 2009
CVE-2009-2635
31Monitor
PHP remote file inclusion vulnerability in toolbar_ext.php in the RealEstateManager (com_realestatemanager) component 1.0 Basic for Joomla!
HighCVSS 7.5Proof of conceptEPSS 2%
- pre-auth RCE
joomla · joomlaJul 28, 2009
CVE-2009-2634
31Monitor
PHP remote file inclusion vulnerability in toolbar_ext.php in the MediaLibrary (com_media_library) component 1.5.3 Basic for Joomla! allows
HighCVSS 7.5Proof of conceptEPSS 2%
- pre-auth RCE
joomla · joomlaJul 28, 2009
CVE-2010-1522
30Monitor
Multiple SQL injection vulnerabilities in the BookLibrary Basic (com_booklibrary) component 1.5.3 before 1.5.3_2010_06_20 for Joomla! allow
HighCVSS 7.5No exploitEPSS 1%
- pre-auth RCE
- SQL injection
joomla · joomla\!Jul 2, 2010
CVE-2010-2851
30Monitor
SQL injection vulnerability in the BookLibrary From Same Author (com_booklibrary) module 1.5 and possibly earlier for Joomla! allows remote
HighCVSS 7.5No exploitEPSS 1%
- pre-auth RCE
- SQL injection
joomla · joomla\!Jul 24, 2010
CVE-2026-101109
21Monitor
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- XSS
ordasoft · vehicle managerSep 28, 2026
CVE-2026-101111
21Monitor
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- XSS
ordasoft · book librarySep 28, 2026
CVE-2026-100753
21Monitor
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7.9
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- XSS
ordasoft · real estate managerSep 28, 2026