I found a possible solution for those who have no SSH access, or having difficulties using sh command to apply for the patch: (community edition)
With the successful update on the local machine, find the 5 files on your local machine which have the updates:
app/code/core/Mage/Admin/Model/Observer.php
app/code/core/Mage/Core/Controller/Request/Http.php
app/code/core/Mage/Oauth/controllers/Adminhtml/Oauth/AuthorizeController.php
app/code/core/Mage/XmlConnect/Model/Observer.php
lib/Varien/Db/Adapter/Pdo/Mysql.php
upload these files to your server using FTP, and patches are done!
To me, this is a safer option to apply for the patches.
Pls correct me if I am wrong! Hopefully it helps.
app/etc/
folder where you get one file regarding your patch, if that one is exist so than your patch is applied