Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

28 matches found

NVD
NVD•added 2026/09/20 6:16 p.m.•21 views

CVE-2026-88856

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions updateOSGallery, reached via task=updateosgallery, read a JSON request body and called the value of a method field as a live PHP function, passi...

9.4CVSS0.00666EPSS
SaveExploits0References1
NVD
NVD•added 2026/09/20 6:16 p.m.•21 views

CVE-2026-88855

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions saveGallery passes form data through a hand-rolled parser into Joomla’s Input object, then reads it back with the ARRAY/ STRING filter types, neither of...

8.6CVSS0.00369EPSS
SaveExploits0References1
NVD
NVD•added 2026/09/20 6:16 p.m.•23 views

CVE-2026-88857

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions saveWatermark copied an uploaded file into a web-accessible directory using the client-supplied filename exactly as sent, with no extension chec...

9.4CVSS0.00642EPSS
SaveExploits0References1
NVD
NVD•added 2026/09/20 6:16 p.m.•22 views

CVE-2026-88854

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

9.3CVSS0.00386EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment•added 2026/09/20 5:54 p.m.•13 views

CVE-2026-88857 Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions saveWatermark copied an uploaded file into a web-accessible directory using the client-supplied filename exactly as sent, with no extension chec...

9.4CVSS6.1AI score0.00642EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/09/20 5:54 p.m.•18 views

EUVD-2026-83768

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions saveWatermark copied an uploaded file into a web-accessible directory using the client-supplied filename exactly as sent, with no extension chec...

9.4CVSS6.1AI score0.00642EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/20 5:54 p.m.•53 views

CVE-2026-88857

CVE-2026-88857 is an authenticated remote code execution vulnerability in the OrdaSoft Joomla Gallery extension for Joomla

9.4CVSS6.1AI score0.00642EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/09/20 5:54 p.m.•56 views

CVE-2026-88857 Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions saveWatermark copied an uploaded file into a web-accessible directory using the client-supplied filename exactly as sent, with no extension chec...

9.4CVSS0.00642EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/09/20 5:53 p.m.•17 views

CVE-2026-88854 Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

9.3CVSS5.9AI score0.00386EPSS
SaveExploits1References1
EUVD
EUVD•added 2026/09/20 5:53 p.m.•18 views

EUVD-2026-83767

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

9.3CVSS5.9AI score0.00386EPSS
SaveExploits1References1
CVE
CVE•added 2026/09/20 5:53 p.m.•65 views

CVE-2026-88854

CVE-2026-88854 is an unauthenticated SQL injection in the OrdaSoft Joomla Gallery extension (mod_osgallery_search) affecting Joomla getVar()—not a real Joomla filter method—so only HTML tags are stripped while quotes and SQL syntax pass through. The value is concatenated directly into a LIKE clau...

9.3CVSS5.9AI score0.00386EPSS
SaveExploits1References1
Cvelist
Cvelist•added 2026/09/20 5:53 p.m.•60 views

CVE-2026-88854 Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla getVar, which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a...

9.3CVSS0.00386EPSS
SaveExploits1References1
EUVD
EUVD•added 2026/09/20 5:50 p.m.•18 views

EUVD-2026-83766

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions saveGallery passes form data through a hand-rolled parser into Joomla’s Input object, then reads it back with the ARRAY/ STRING filter types, neither of...

8.6CVSS5.9AI score0.00369EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/20 5:50 p.m.•45 views

CVE-2026-88855

CVE-2026-88855 is an authenticated SQL injection in the OrdaSoft Joomla Gallery extension for Joomla

8.6CVSS5.9AI score0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/09/20 5:50 p.m.•17 views

CVE-2026-88855 Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions saveGallery passes form data through a hand-rolled parser into Joomla’s Input object, then reads it back with the ARRAY/ STRING filter types, neither of...

8.6CVSS5.9AI score0.00369EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/09/20 5:50 p.m.•54 views

CVE-2026-88855 Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions saveGallery passes form data through a hand-rolled parser into Joomla’s Input object, then reads it back with the ARRAY/ STRING filter types, neither of...

8.6CVSS0.00369EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/20 5:50 p.m.•33 views

CVE-2026-88856

OrdaSoft Joomla Gallery extension for Joomla versions

9.4CVSS5.9AI score0.00666EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/09/20 5:50 p.m.•17 views

CVE-2026-88856 Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions updateOSGallery, reached via task=updateosgallery, read a JSON request body and called the value of a method field as a live PHP function, passi...

9.4CVSS5.9AI score0.00666EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/09/20 5:50 p.m.•19 views

EUVD-2026-83765

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions updateOSGallery, reached via task=updateosgallery, read a JSON request body and called the value of a method field as a live PHP function, passi...

9.4CVSS5.9AI score0.00666EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/09/20 5:50 p.m.•50 views

CVE-2026-88856 Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions updateOSGallery, reached via task=updateosgallery, read a JSON request body and called the value of a method field as a live PHP function, passi...

9.4CVSS0.00666EPSS
SaveExploits0References1
Rows per page
Query Builder