CVE-2008-2882

Name of the Vulnerable Software and Affected Versions sHibby sHop versions 2.2 and earlier

Description The issue allows remote attackers to update a file or have unspecified other impact via a direct request to "upgrade.asp" without requiring administrative authentication.

Recommendations For sHibby sHop versions 2.2 and earlier, consider restricting access to the "upgrade.asp" file until a patch is available, and ensure that proper administrative authentication is required for any updates.