CVE-2002-2289 in Badblue
Summary
soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.