Executive brief
Easy Shop is an e-commerce and shopping cart extension for the Joomla content management system. A security flaw allows unauthorized individuals to access and read sensitive files on the web server, such as database credentials and system configuration files. This could lead to a full compromise of the website and the exposure of customer or business data.
Technical details
A local file inclusion (LFI) vulnerability exists in the Easy Shop component (com_easyshop) for Joomla! version 1.2.3. The flaw is located in the 'ajax.loadImage' task, which fails to properly validate the 'file' parameter. An unauthenticated attacker can exploit this by sending a specially crafted GET request to index.php with a base64-encoded path (e.g., directory traversal strings) in the file parameter. Successful exploitation allows the retrieval of sensitive local files such as configuration.php or /etc/passwd. The extension has been unpublished from the Joomla Extensions Directory due to this vulnerability.
Affected products
- Joomtech Easy Shop 1.2.3
Timeline
- 2019-01-21: other: Exploit first published on Exploit-DB
- 2026-06-19: advisory: CVE published and NVD record created