Description
Content Management Made Easy (CMME) 1.19 allows remote attackers to obtain system information via a direct request to info.php, which invokes the phpinfo function.
References
- cmme-phpinfo-information-disclosure(45703) vdb-entry
- http://www.bugreport.ir/index_55.htm
- 32169 third-party-advisory
- 20081004 CMME Multiple Information disclosure vulnerabilities mailing-list