Unrated severityNVD Advisory· Published May 4, 2010· Updated Apr 29, 2026

CVE-2010-1720

Description

SQL injection vulnerability in the Q-Personel (com_qpersonel) component 1.0.2 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the katid parameter in a qpListele action to index.php.

Affected products

Qproje/Com Qpersonel
cpe:2.3:a:qproje:com_qpersonel:*:*:*:*:*:*:*:*
Range: <=1.0.2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.exploit-db.com/exploits/12200nvdExploit
www.securityfocus.com/bid/39466nvdExploit
secunia.com/advisories/39445nvdVendor Advisory
osvdb.org/63894nvd
www.xenuser.org/documents/security/qpersonel_sql.txtnvd
exchange.xforce.ibmcloud.com/vulnerabilities/57775nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000