CVE-2009-4575

CVSS 4.3 - MEDIUM
Description

Cross-site scripting (XSS) vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 RC2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the personel_sira parameter in a sirala action to index.php.

Affected Products
2
Vendor Product Version
joomla joomla\! All versions
qproje com_qpersonel 1.2
References
http://secunia.com/advisories/37897
http://www.exploit-db.com/exploits/10738
http://www.osvdb.org/61354
http://www.securityfocus.com/bid/37503
https://exchange.xforce.ibmcloud.com/vulnerabiliti...
http://secunia.com/advisories/37897
http://www.exploit-db.com/exploits/10738
http://www.osvdb.org/61354
http://www.securityfocus.com/bid/37503
https://exchange.xforce.ibmcloud.com/vulnerabiliti...
Weakness Types
CWE-79
CVE Information
CVE ID:
CVE-2009-4575
Published:
2010-01-06
Modified:
2026-04-23
CVSS Score:
4.3
Severity:
MEDIUM
Vector:
AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Vendors
qproje joomla
Quick Actions
View on NVD Find Similar CVEs
CVSS Severity Scale
0.0 - 3.9 LOW
4.0 - 6.9 MEDIUM
7.0 - 8.9 HIGH
9.0 - 10.0 CRITICAL