CVE Catalog
CVE-2000-0396
MediumExploitation Probability (EPSS)
Very high risk6.87%
93th percentile - higher than 93% of all known CVEs
Summary
The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files.
Risk Assessment
Attackers may gain access to sensitive information, potentially leading to further attacks on the application or server.
Recommendation
It is recommended to update the Carello software and implement appropriate security measures to prevent remote file duplication.
Original NVD description (English source)
The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files.