Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions showSearchResult() and showSearchResultAjax() read the textsearch/searchText request parameter with $input->getVar(), which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a LIKE clause with no escaping. The endpoint requires no login of any kind: mod_osgallery_search is a public, commonly-published search box. Any anonymous site visitor can inject a UNION SELECT and read arbitrary database content.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🔴 CVE-2026-88854 — OrdaSoft Joomla Gallery'de kritik SQL Injection açığı için PoC yayınlandı. OrdaSoft OS Responsive Image Gallery 1.0.0–6.2.6 sürümlerini etkileyen açık, kimlik doğrulaması gerektirmeden SQL sorgularının manipüle edilmesine ve uygun koşullarda veritabanı içeriğinin okunmasına izin verebiliyor. CVSS: 9.3 Critical. Yamalanmış sürüm: 6.2.7+ PoC: https://github.com/murrez/CVE-2026-88854
CVE-2026-88854 (CVSS 9.3) — unauthenticated SQLi in OrdaSoft Joomla Gallery (com_osgallery ≤ 6.2.6). Public image search: showSearchResultAjax + textsearch → unsanitized LIKE concat. PoC: check / mass scan 🔗 https://github.com/murrez/CVE-2026-88854 Authorized testing only.
CVE-2026-88854 Joomla Extension - https://OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions showSearchResult() and showSe… https://www.cve.org/CVERecord?id=CVE-2026-88854
Two OrdaSoft Joomla Gallery SQL injections are both titled "Unauthenticated." Only one is — a 9.3 anyone can reach from a public search box. The other's own vector says it needs a login. No exploitation reported. https://severitydaily.com/ordasoft-joomla-gallery-cve-2026-88854-88855-titled-unauthenticated-only-one-is/