{"schema":"vulnpedia.research/1","cve":"CVE-2026-102428","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://www.ordasoft.com/","tags":["product","Product"],"source":"mitre","sourceId":"Joomla","modified":"2026-10-05T18:05:33.886Z","origins":[{"source":"mitre","sourceId":"Joomla","modified":"2026-10-05T18:05:33.886Z","url":"https://www.ordasoft.com/"},{"source":"nvd","sourceId":"CVE-2026-102428","modified":"2026-10-14T18:52:52.567","url":"https://www.ordasoft.com/"}]},{"source":"euvd","sourceId":"EUVD-2026-92449","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92449","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-92449","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92449"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/murrez/CVE-2026-102428","source":"poc-in-github","sourceId":"CVE-2026-102428","description":"CVE-2026-102428 PoC: OrdaSoft Joomla OS CCK (com_os_cck) <=8.3.15 unauth SQLi — order_field/order_direction ORDER BY injection on public listings. Check + mass exploit, POCBIT-102428-OK marker, CVSS 9.3. https://pocbit.org/pocs/cve-2026-102428","modified":"2026-10-10T08:38:42Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-102428","url":"https://github.com/murrez/CVE-2026-102428"},{"source":"poc-in-github","sourceId":"CVE-2026-102428","modified":"2026-10-10T08:38:42Z","url":"https://github.com/murrez/CVE-2026-102428"}],"tags":[]},{"url":"https://github.com/MRdark-ops/sqli-cve-2026-102428","source":"poc-in-github","sourceId":"CVE-2026-102428","description":"PoC: OrdaSoft Joomla OS CCK (com_os_cck) 8.3.15 unauth SQLi —mass+exploit+dork","modified":"2026-10-10T23:55:00Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-102428","url":"https://github.com/MRdark-ops/sqli-cve-2026-102428"},{"source":"poc-in-github","sourceId":"CVE-2026-102428","modified":"2026-10-10T23:55:00Z","url":"https://github.com/MRdark-ops/sqli-cve-2026-102428"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[]}