CVE-2008-2882

EPSS 2.6%

upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which allows remote attackers to update a file or have unspecified other impact via a direct request.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/5895unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/30787 http://securityreason.com/securityalert/3962 https://exchange.xforce.ibmcloud.com/vulnerabilities/43296 https://www.exploit-db.com/exploits/5895