This question already has an answer here:
I found a possible solution for those who have no SSH access, or having difficulties using sh command to apply for the patch: (community edition)
With the successful update on the local machine, find the 5 files on your local machine which have the updates:
app/code/core/Mage/Admin/Model/Observer.php app/code/core/Mage/Core/Controller/Request/Http.php app/code/core/Mage/Oauth/controllers/Adminhtml/Oauth/AuthorizeController.php app/code/core/Mage/XmlConnect/Model/Observer.php lib/Varien/Db/Adapter/Pdo/Mysql.php
upload these files to your server using FTP, and patches are done!
To me, this is a safer option to apply for the patches.
Pls correct me if I am wrong! Hopefully it helps.