PT-2008-4321
CVE-2008-2882
·
تاريخ النشر
2008-06-26
·
تاريخ التحديث
2017-10-19
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
sHibby sHop versions 2.2 and earlier
Description
The issue allows remote attackers to update a file or have unspecified other impact via a direct request to "upgrade.asp" without requiring administrative authentication.
Recommendations
For sHibby sHop versions 2.2 and earlier, consider restricting access to the "upgrade.asp" file until a patch is available, and ensure that proper administrative authentication is required for any updates.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾