CVE-2008-2873
EUVD-2008-286626.06.2008, 17:41
sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request to Db/urun.mdb.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| aspindir | shibby_shop | 𝑥 ≤ 2.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration