CVE-2008-3400
XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, which calls the phpinfo function.
Date published : 2008-07-31
http://www.securityfocus.com/archive/1/494754/100/0/threaded