CVE-2026-88854
Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7
Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions showSearchResult() and showSearchResultAjax() read the textsearch/searchText request parameter with $input->getVar(), which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a LIKE clause with no escaping. The endpoint requires no login of any kind: mod_osgallery_search is a public, commonly-published search box. Any anonymous site visitor can inject a UNION SELECT and read arbitrary database content.
| CWE | CWE-89 |
| Vendor | ordasoft.com |
| Product | ordasoft joomla gallery free extension for joomla |
| Published | Sep 20, 2026 |
Get instant alerts for ordasoft.com ordasoft joomla gallery free extension for joomla
Be the first to know when new unknown vulnerabilities affecting ordasoft.com ordasoft joomla gallery free extension for joomla are published — delivered to Slack, Telegram or Discord.