2008-07-31 16:00:00
mitre
PUBLISHED
XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, which calls the phpinfo function.