CVE:CVE-2009-4575
CNNVD:CNNVD-201001-018
Joomla! Q-Personel (com_qpersonel)组件中存在跨站脚本攻击漏洞。远程攻击者可以借助sirala操作中提交到index.php的personel_sira参数，注入任意的web脚本或HTML。
solution:Upgrade qproje com_qpersonel to a higher version than 1.2:rc2,and avoid the version 1.2:rc2