CVE-2012-4256: Infoleak
The jNews (comjnews) component 7.5.1 for Joomla! allows remote attackers to obtain sensitive information via the emailsearch parameter, which reveals the installation path in an error message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4256?
CVE-2012-4256 has a medium severity rating due to its potential to disclose sensitive information.
How do I fix CVE-2012-4256?
To fix CVE-2012-4256, upgrade the jNews component to a version that is not vulnerable, ideally a version after 7.5.1.
What type of attacks can CVE-2012-4256 facilitate?
CVE-2012-4256 can facilitate information disclosure attacks by exposing the Joomla installation path to remote attackers.
Who is affected by CVE-2012-4256?
CVE-2012-4256 affects users of the jNews component version 7.5.1 for Joomla!.
What is the risk associated with CVE-2012-4256?
The risk associated with CVE-2012-4256 is that sensitive directory structure information may aid attackers in further exploiting the Joomla! installation.