CVE-2008-2873

Name of the Vulnerable Software and Affected Versions sHibby sHop versions 2.2 and earlier

Description The issue allows remote attackers to download a database due to insufficient access control of sensitive information stored under the web root. This can be achieved via a direct request to "Db/urun.mdb".

Recommendations For versions 2.2 and earlier, consider restricting access to the database file "urun.mdb" to prevent unauthorized downloads until a proper fix is applied.