CVE-2012-1920

Name of the Vulnerable Software and Affected Versions AtMail Open-Source versions 1.04 and earlier

Description The issue allows remote attackers to obtain configuration information by making a direct request to "install/info.php", which calls the phpinfo() function.

Recommendations For AtMail Open-Source versions 1.04 and earlier, consider restricting access to the "install/info.php" file to prevent unauthorized disclosure of configuration information. As a temporary workaround, remove or disable the "install/info.php" file until a patch is available.