imcat 4.4 allows remote malicious users to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI.
txjia imcat 4.4