PT-2008-4312
CVE-2008-2873
·
تاريخ النشر
2008-06-26
·
تاريخ التحديث
2017-10-19
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
sHibby sHop versions 2.2 and earlier
Description
The issue allows remote attackers to download a database due to insufficient access control of sensitive information stored under the web root. This can be achieved via a direct request to "Db/urun.mdb".
Recommendations
For versions 2.2 and earlier, consider restricting access to the database file "urun.mdb" to prevent unauthorized downloads until a proper fix is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾