CVE:CVE-2008-4170
CNNVD:CNNVD-200809-284
osCommerce 2.2 RC 2a的create_account.php 允许远程攻击者通过一个无效的dob参数来获得敏感信息。它会通过一条错误信息戏楼安装路径信息。
solution:Upgrade oscommerce oscommerce to a higher version than 2.2:rc_2a,and avoid the version 2.2:rc_2a