JVN#67334580 hisa_cart information disclosure vulnerability

hisa_cart from Hisanaga Electric Co.Ltd is a shopping cart module for XOOPS. hisa_cart contains a vulnerability allowing the disclosure of users’ information.

Impact

A remote attacker could obtain information of registered users.

Solution

Update the Software
An update is being distributed to registered users.
Update to the latest version according to the information provided by the vendor.

It is recommended that users should not use hisa_cart v1.29 and earlier.

Products Affected

• hisa_cart v1.29 and earlier