VYPR

Real Estate Manager (Free)

by Ordasoft

CVEs (1)

  • CVE-2026-100752CriSep 28, 2026
    risk 0.60cvss —epss —

    Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 - site/realestatemanager.php builds the ORDER BY clause of three separate frontend property-listing queries (category browsing, search results, and the full property listing)…