CVE-2009-4961 Information

Description

Lanai Core 0.6 allows remote attackers to obtain configuration information via a direct request to info.php which calls the phpinfo function.

Reference

http://www.exploit-db.com/exploits/9490