Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Jun 16, 2026

CVE-2004-2448

Description

S-Mart Shopping Cart or RediCart 3.9.5b stores smart.cfg under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the database name.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cassiopeia/S Mart Shopping Cart
cpe:2.3:a:cassiopeia:s-mart_shopping_cart:*:*:*:*:*:*:*:*
Itransact/Redicart
cpe:2.3:a:itransact:redicart:3.9.5b:*:*:*:*:*:*:*
S Mart/Shopping Cartllm-create
Range: = 3.9.5b
S Mart/RediCartllm-create
Range: = 3.9.5b

Patches

Vulnerability mechanics

References

secunia.com/advisories/13301nvdVendor Advisory
securitytracker.com/idnvd
www.osvdb.org/12117nvd
exchange.xforce.ibmcloud.com/vulnerabilities/18219nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000