← Database

CVE-2008-4170

MEDIUM CVSS: 5.0 Published: 2008-09-22 Modified: 2026-06-16

Description

create_account.php in osCommerce 2.2 RC 2a allows remote attackers to obtain sensitive information via an invalid dob parameter, which reveals the installation path in an error message.

Affected Platforms

Oscommerce Oscommerce

Weakness Type

CWE-200

References