CVE-2019-25760 — MEDIUM (6.2)

Vulnerability Description

Joomla! Component Easy Shop 1.2.3 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by supplying base64-encoded file paths. Attackers can send GET requests to index.php with the option parameter set to com_easyshop, task set to ajax.loadImage, and a base64-encoded file path in the file parameter to retrieve sensitive files like configuration.php and system files.

CVSS Score

6.2

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Joomtech	Easy Shop	1.2.3

Related Weaknesses (CWE)

CWE-98

References

https://extensions.joomla.org/extensions/extension/e-commerce/shopping-cart/easyProduct
https://joomtech.net/ProductBroken Link
https://www.exploit-db.com/exploits/46219ExploitVDB Entry
https://www.vulncheck.com/advisories/joomla-component-easy-shop-local-file-incluThird Party Advisory

FAQ

What is CVE-2019-25760?

CVE-2019-25760 is a vulnerability with a CVSS score of 6.2 (MEDIUM). Joomla! Component Easy Shop 1.2.3 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by supplying base64-encoded file paths. Attackers can send...

How severe is CVE-2019-25760?

CVE-2019-25760 has been rated MEDIUM with a CVSS base score of 6.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-25760?

Check the references section above for vendor advisories and patch information. Affected products include: Joomtech Easy Shop.