Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to phpinfo for the (1) Team, (2) News, or (3) Liens modules.
https://exchange.xforce.ibmcloud.com/vulnerabilities/11424
https://euvd.enisa.europa.eu/vulnerability/EUVD-2003-1361
http://www.securityfocus.com/bid/6917
http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html