CVE-2012-4256 in Com Jnews

Riassunto

di MITRE

The jNews (com_jnews) component 7.5.1 for Joomla! allows remote attackers to obtain sensitive information via the emailsearch parameter, which reveals the installation path in an error message.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 13/08/2012
• Divulgazione: 13/08/2012
• Moderazione: accettato
• Voce: VDB-61568
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 5.3 (VulDB)
• EPSS: 0.01480
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-4256
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-4256
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-4256/