Threats tagged 'ghsa-rfcm-hchc-h7rw'

1 threat

Threats tagged 'ghsa-rfcm-hchc-h7rw'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.3%	CVE-2026-100752Real Estate Manager (Free) extension for Joomla · SQL Injection Critical9.3EPSS 0.3%2026-09-28CVE Database V5CVE-2026-100752 An unauthenticated SQL injection vulnerability exists in the ordasoft.com Real Estate Manager (Free) extension for Joomla versions 1.0.0 through 6.7.8. The vulnerability arises from improper neutralization of special elements in the order_field parameter used in SQL ORDER BY clauses on the frontend property-listing queries. This allows an attacker to inject arbitrary SQL commands without authentication. EPSS 0.3%Vulnerability ordasoft.com #cwe-89 #ghsa-rfcm-hchc-h7rw	CVE Database V5	2026-09-28

Showing 1–1 of 1 result