CVE

Id
44304  
CVE No.
CVE-2010-1720  
Status
Candidate  
Description
SQL injection vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the katid parameter in a qpListele action to index.php.  
Phase
Assigned (20100504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
482990 44304 CVE-2010-1720 EXPLOIT-DB:12200  View
482991 44304 CVE-2010-1720 URL:http://www.exploit-db.com/exploits/12200  View
482992 44304 CVE-2010-1720 MISC:http://www.xenuser.org/documents/security/qpersonel_sql.txt  View
482993 44304 CVE-2010-1720 BID:39466  View
482994 44304 CVE-2010-1720 URL:http://www.securityfocus.com/bid/39466  View
482995 44304 CVE-2010-1720 OSVDB:63894  View
482996 44304 CVE-2010-1720 URL:http://osvdb.org/63894  View
482997 44304 CVE-2010-1720 SECUNIA:39445  View
482998 44304 CVE-2010-1720 URL:http://secunia.com/advisories/39445  View
482999 44304 CVE-2010-1720 XF:qpersonel-index-sql-injection(57775)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39674 JVNDB-2010-005459 Zikula Application Framework におけるクロスサイトスクリプティングの脆弱性 Zikula Application Framework は、ZLanguage.php が適切に処理しないため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-1724 44304 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005459.html  View