Information Disclosure in osCommerce by osCommerce
CVE-2008-4170

Currently unrated

Key Information:

Vendor: Oscommerce
Status: Oscommerce
Vendor: CVE Published:; 22 September 2008

What is CVE-2008-4170?

An information disclosure vulnerability exists in osCommerce 2.2 RC 2a, where the create_account.php script improperly handles an invalid 'dob' parameter. Remote attackers could exploit this flaw to retrieve sensitive information, such as the installation path, through error messages generated by the application. This can lead to further attacks and exploitation of the affected system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch