high7.5Public exploit code
CVE-2001-0614
Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Pacific Software Carello 1.2.1 Shopping Cart - Command Execution2001-05-14 · remote · windows · Verified
Impact
Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Carello | E-Commerce | through 1.2.1 |