Aspindir Shibby Shop
3 CVEs affecting Aspindir Shibby Shop. Latest disclosed: 2008-06-26. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2008-2882 | | 2008-06-26 | upgrade.asp in sHibby sHop 2.2 and earlier does not require administrative authentication, which allows remote attackers to update a file or have unspecified o… | |
CVE-2008-2873 | | 2008-06-26 | sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a datab… | |
CVE-2008-2872 | | 2008-06-26 | SQL injection vulnerability in default.asp in sHibby sHop 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sayfa parameter. |