5.0med
CVE-2000-03961 exploit
The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the a…
Published 26 y ago · modified 4 mo ago · JSON
CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
6.9%
percentile 94%
Public exploits
1
Exploit-DB
Summary
The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files.
Exploit prediction (EPSS)
6.87% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.
Exploits and detections
- EDB-19957 Pacific Software Carello 1.2.1 - File Duplication / Source Disclosure · remote · 2000-05-24
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
References
- securityfocus.com /bid/1245 · vdb-entry, x_refsource_BID, x_transferred
- archives.neohapsis.com /archives/bugtraq/2000-05/0285.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
Sources
- CVE List: CVE-2000-0396
- NVD: CVE-2000-0396
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.