Atmail · Atmail Open-Source · CVE-2012-1920
**Name of the Vulnerable Software and Affected Versions**
AtMail Open-Source versions 1.04 and earlier
**Description**
The issue allows remote attackers to obtain configuration information by making a direct request to "install/info.php", which calls the `phpinfo()` function.
**Recommendations**
For AtMail Open-Source versions 1.04 and earlier, consider restricting access to the "install/info.php" file to prevent unauthorized disclosure of configuration information. As a temporary workaround, remove or disable the "install/info.php" file until a patch is available.