Unscored severity · published Aug 13, 2012
CVE-2012-4256
The jNews (com_jnews) component 7.5.1 for Joomla! allows remote attackers to obtain sensitive information via the emailsearch parameter, which reveals the installation path in an…
–
CVSS
1.5%
EPSS
No
On KEV
Description
The jNews (com_jnews) component 7.5.1 for Joomla! allows remote attackers to obtain sensitive information via the emailsearch parameter, which reveals the installation path in an error message.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CJ
Com Jnews · Joobi
7.5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-4256
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-4256
Exploit
http://hauntit.blogspot.com/2012/04/en-jnews-jnewscore751-information.html
Exploit
http://packetstormsecurity.org/files/112233/jNews-7.5.1-Information-Disclosure.html
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/75198
More from Com Jnews
–
CVE-2013-1636
Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin before 1.6.3 for WordPress,…