Tpshop versions 2.0.8 and below suffer from arbitrary file download and server-side request forgery vulnerabilities. Continue reading...