CVE-2008-3400

XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, which calls the phpinfo function

published July 31, 2008

CVSS
—
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, which calls the phpinfo function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02253 · 82.7th percentile
Published
2008-07-31T16:00Z
EPSS history
Timeline
  • 31 JUL 16:00Z
    XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, which calls the phpinfo function
    cvelistv5