medium5.0Public exploit code
CVE-2000-0396
The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read sour…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Pacific Software Carello 1.2.1 - File Duplication / Source Disclosure2000-05-24 · remote · windows · Verified
Impact
The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pacific Software | Carello | Version 1.2.1 |