CVE-2026-101108 | ordasoft Vehicle Manager Extension up to 6.5.7 Sorting Logic site/vehiclemanager.php order_field/order_direction sql injection

A vulnerability identified as critical has been detected in ordasoft Vehicle Manager Extension up to 6.5.7. Affected by this vulnerability is an unknown functionality of the file site/vehiclemanager.php of the component Sorting Logic. Performing a manipulation of the argument order_field/order_direction results in sql injection.

This vulnerability is reported as CVE-2026-101108. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More