CVE-2008-2882

upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which allows remote attackers to update a file or have unspecified…

published June 26, 2008

CVSS
—
EPSS
3%
Percentile
85.0
In the wild
Unconfirmed
What it is

upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which allows remote attackers to update a file or have unspecified other impact via a direct request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02580 · 85.0th percentile
Published
2008-06-26T17:00Z
EPSS history
Timeline
  • 26 JUN 17:00Z
    upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which allows remote attackers to update a file or have unspecified…
    cvelistv5