Vulnerabilities

TI-2010-01649 CVE-2010-1720 · GHSA-pc8h-26jw-2qx3

SQL injection vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 and earlier…

LOW 35

SQL injection vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the katid parameter in a qpListele action to index.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0116 Published 2010-05-04 No fix listed CWE-89

TI-2009-04331 CVE-2009-4575 · GHSA-gc9p-5mxj-f79f

Cross-site scripting (XSS) vulnerability in the Q-Personel (com_qpersonel) component…

LOW 23

Cross-site scripting (XSS) vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 RC2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the personel_sira parameter in a sirala action…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01497 Published 2010-01-06 No fix listed CWE-79

Vulnerabilities

Filters

SQL injection vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 and earlier…

Cross-site scripting (XSS) vulnerability in the Q-Personel (com_qpersonel) component…