CVE-2010-1720

2010-05-0415:00:00

mitre

www.cve.org

AI Score

8.4

Confidence

Low

EPSS

0.001

Percentile

48.9%

JSON

SQL injection vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the katid parameter in a qpListele action to index.php.

References

osvdb.org/63894

secunia.com/advisories/39445

www.exploit-db.com/exploits/12200

www.securityfocus.com/bid/39466

www.xenuser.org/documents/security/qpersonel_sql.txt

exchange.xforce.ibmcloud.com/vulnerabilities/57775