{"schema":"vulnpedia.research/1","cve":"CVE-2026-102782","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://www.ordasoft.com/","tags":["product"],"source":"mitre","sourceId":"Joomla","modified":"2026-10-08T04:53:04.230Z","origins":[{"source":"mitre","sourceId":"Joomla","modified":"2026-10-08T04:53:04.230Z","url":"https://www.ordasoft.com/"},{"source":"nvd","sourceId":"CVE-2026-102782","modified":"2026-10-07T19:17:31.313","url":"https://www.ordasoft.com/"}]},{"source":"euvd","sourceId":"EUVD-2026-94216","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-94216","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-94216","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-94216"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/murrez/CVE-2026-102782","source":"poc-in-github","sourceId":"CVE-2026-102782","description":"CVE-2026-102782 — OrdaSoft Joomla Simple Membership <7.4.0 unauth SQLi (CWE-89, CVSS 4.0 9.3). PoCbit PoC: checkLoginPass + login param extractvalue error leak. check/exploit/mass, hits.txt & exploited.txt. Fix 7.4.0+. https://pocbit.org/pocs/cve-2026-102782","modified":"2026-10-20T16:49:52Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-102782","url":"https://github.com/murrez/CVE-2026-102782"},{"source":"poc-in-github","sourceId":"CVE-2026-102782","modified":"2026-10-20T16:49:52Z","url":"https://github.com/murrez/CVE-2026-102782"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[]}