CVE-2008-4164: Memht Portal

Low severity, CVSS 2.6. EPSS: 2.2% chance of exploitation in the next 30 days.

cron.php in MemHT Portal 3.9.0 and earlier allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.

Affected products

• Memht Memht Portal: up to and including 3.9.0; version 3.1 only; version 3.4 only; version 3.4.5 only; version 3.6.0 only; version 3.8.5 only

Published 2008-09-22. Last modified 2026-06-16.