VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 22, 2008· Updated Jun 16, 2026

CVE-2008-4170

CVE-2008-4170

Description

create_account.php in osCommerce 2.2 RC 2a allows remote attackers to obtain sensitive information via an invalid dob parameter, which reveals the installation path in an error message.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • OsCommerce/Oscommerce2 versions
    cpe:2.3:a:oscommerce:oscommerce:2.2:rc_2a:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oscommerce:oscommerce:2.2:rc_2a:*:*:*:*:*:*
    • (no CPE)range: 2.2 RC 2a

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.