VYPR

Vehicle Manager (Free)

by Ordasoft.com

CVEs (1)

  • CVE-2026-101108CriSep 28, 2026
    risk 0.60cvss —epss —

    Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 - site/vehiclemanager.php reads the order_field and order_direction sort parameters at three separate anonymous-reachable frontend entry points (category listing, search, and the…