← Database

CVE-2008-2873

MEDIUM CVSS: 5.0 Published: 2008-06-26 Modified: 2026-06-16

Description

sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request to Db/urun.mdb.

Affected Platforms

Aspindir Shibby Shop

Weakness Type

CWE-264

References