CVE-2026-101108

CVE-2026-101108 — OrdaSoft Vehicle Manager Free unauthenticated SQL injection Python 3 PoC for CVE-2026-101108 — OrdaSoft Vehicle Manager Free Joomla extension ≤ 6.5.7. Fixed in 6.5.8+. | ---|--- PoCbit| https://pocbit.org/pocs/cve-2026-101108 Catalog| https://pocbit.org/pocs/ Component|...

Exploit for CVE-2026-101108

CVE-2026-101108 — OrdaSoft Vehicle Manager Free unauthentica...

CVE-2026-101108 Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager Free 6.5.8 - site/vehiclemanager.php reads the orderfield and orderdirection sort parameters at three separate anonymous-reachable frontend entry points category listing, search, and the all-vehicles listing throug...

CVE-2026-101108: Improper Neutralization of Special Elements used in an SQL Command

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager Free 6.5.8 - site/vehiclemanager.php reads the orderfield and orderdirection sort parameters at three separate anonymous-reachable frontend entry points category listing, search, and the all-vehicles listing throug...

PT-2026-102304

Name of the Vulnerable Software and Affected Versions Vehicle Manager Free versions prior to 6.5.8 Description An unauthenticated SQL Injection exists in the site/vehiclemanager.php file. The issue occurs because the order field and order direction parameters are processed through a sanitizing...