Vulnerabilities > CVE-2000-0396 - Unspecified vulnerability in Pacific Software Carello 1.2.1

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
pacific-software
exploit available
NVD
Published: 2000-05-24
Updated: 2008-09-10

Summary

The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files.

Vulnerable Configurations

Part Description Count
Application
Pacific_Software
1

Exploit-Db

descriptionPacific Software Carello 1.2.1 File Duplication and Source Disclosure Vulnerability. CVE-2000-0396 . Remote exploit for windows platform
idEDB-ID:19957
last seen2016-02-02
modified2000-05-24
published2000-05-24
reporterCerberus Security Team
sourcehttps://www.exploit-db.com/download/19957/
titlePacific Software Carello 1.2.1 File Duplication and Source Disclosure Vulnerability

References