Cpe:2.3:a:ordasoft:real_estate_manager:*:*:*:*:*:*:*:*

OrdaSoft Real Estate Manager for Joomla versions 6.7.8 and earlier are vulnerable to unauthenticated SQL injection via the 'order_field' parameter, enabling unauthorized database access and data exfiltration.