Joomla! Database File List

ID: joomla-file-listing

Severity: medium

Author: iampritam

Tags: exposure,joomla,listing,database,edb

Description

A Joomla! database directory /libraries/joomla/database/ was found exposed and has directory indexing enabled.

YAML Source

id: joomla-file-listing

info:
  name: Joomla! Database File List
  author: iampritam
  severity: medium
  description: A Joomla! database directory /libraries/joomla/database/ was found exposed and has directory indexing enabled.
  remediation: Disable directory indexing on the /libraries/joomla/database/ directory or remove the content from the web root. If the databases can be download, rotate any credentials contained in the databases.
  reference:
    - https://www.exploit-db.com/ghdb/6377
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
    cvss-score: 5.3
    cwe-id: CWE-548
  metadata:
    max-request: 1
  tags: exposure,joomla,listing,database,edb

http:
  - method: GET
    path:
      - "{{BaseURL}}/libraries/joomla/database/"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "Index of /libraries/joomla/database"
          - "Parent Directory"
        condition: and

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100baaac1ee31e741ecdb6c390c6d1828a8198f563d3cc4aa543e042241cabc7364022100a52cb567172aebe8b85c20594cadc5ceae896052e0a46fa9906bb3afebf22e26:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/exposures/files/joomla-file-listing.yaml"

View on Github