Detections
Analytics
CVE-2008-2882
critical
Description
upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which allows remote attackers to update a file or have unspecified other impact via a direct request.
References
https://www.exploit-db.com/exploits/5895
https://exchange.xforce.ibmcloud.com/vulnerabilities/43296