EUVD-2012-4200

Malware in sbrugna...

Design/Logic Flaw

The jNews comjnews component 7.5.1 for Joomla! allows remote attackers to obtain sensitive information via the emailsearch parameter, which reveals the installation path in an error message...

CVE-2012-4256

The CVE-2012-4256 entry concerns the jNews (com_jnews) Joomla! component version 7.5.1. The vulnerability is an information disclosure where remote attackers can obtain sensitive data by abusing the emailsearch parameter, which causes an error message that reveals the installation path. The Conne...