CVE-2012-4256 The jNews (com_jnews) component 7.5.1 for Joomla! allows remote attackers to obtain sensitive information via the emailsearch parameter, which reveals the installation path in an error message.
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The jNews (com_jnews) component 7.5.1 for Joomla! allows remote attackers to obtain sensitive information via the emailsearch parameter, which reveals the installation path in an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joobi com jnews | = 7.5.1 | No fix listed |
References
- hauntit.blogspot.com exploit
- packetstormsecurity.org exploit
- jnews-index-info-disclosure(75198) vdb-entry