CVE-2008-4635

Published: Oct 21, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in Hisanaga Electric Co, Ltd. hisa_cart 1.29 and earlier, a module for XOOPS, allows remote attackers to obtain sensitive user information via unknown vectors.

Affected (1)

Products: Hisanaga Electric Co: Hisa Cart

Hisanaga Electric Co

1 product

Hisa Cart

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hisanaga Electric Co Hisa Cart	Up to 1.29

Running on/with	Platform Versions
Xoops Xoops	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://hisacart.chushokigyo.net/modules/info/index.php/intro/url.html

Source: cve@mitre.org

Vendor Advisory

http://jvn.jp/en/jp/JVN67334580/index.html

Source: cve@mitre.org

http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000068.html

Source: cve@mitre.org

http://secunia.com/advisories/32300

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/31795

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/45946

Source: cve@mitre.org

http://hisacart.chushokigyo.net/modules/info/index.php/intro/url.html