Re: phpMyConferences <= 8.0.2 Remote File Inclusion
In 8.0.2, the surrounding code for this bug is:
Since this include is within a function definition, the claimed
exploit (direct request to library.inc.php) should not work.
I'm unclear on whether a global declaration for a variable within a
function definition is sufficient to override initialization from
things like GET requests, but at best, the direct request to
library.inc.php appears erroneous.
Were you able to get an exploit to work?