CVE-2008-4115

CVE-2008-4115 describes an information disclosure vulnerability in TalkBack 2.3.6, where remote attackers can access sensitive configuration details by directly requesting the install/info.php file, which executes the phpinfo function. This vulnerability has a CVSS score of 5.0, indicating a medium severity, as it allows for unauthorized information exposure (C:P) with low attack complexity (AC:L) and no authentication required (Au:N). While there is no evidence of active exploitation (KEV: No) and minimal community discussion, exploit code is publicly available via ExploitDB, suggesting a potential for exploitation.