CVE-2000-0396

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-05-24 · updated 2026-06-16

Description

The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files.

Affected products

Pacific Software Carello: 1.2.1

References

http://archives.neohapsis.com/archives/bugtraq/2000-05/0285.html
http://www.securityfocus.com/bid/1245
http://archives.neohapsis.com/archives/bugtraq/2000-05/0285.html
http://www.securityfocus.com/bid/1245

Get alerted when CVE-2000-0396 or the next vulnerability affects your stack