CVE-2009-4575

EPSS 1.5%

Cross-site scripting (XSS) vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 RC2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the personel_sira parameter in a sirala action to index.php.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/10738unverified exploitdbwww.exploit-db.com/exploits/10738unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/37897 https://exchange.xforce.ibmcloud.com/vulnerabilities/55128 http://www.exploit-db.com/exploits/10738 http://www.osvdb.org/61354 http://www.securityfocus.com/bid/37503