CVE-2000-0396
Carello - Unauthenticated Arbitrary File Read via add.exe File Duplication
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2000-0396. PoCs published by Cerberus Security Team.
AI-analyzed exploit summary This exploit leverages a file duplication vulnerability in Carello shopping cart software via the add.exe script, allowing remote users to read and write files on the target system by appending a '1' to the filename. It requires the anonymous internet account to have write access to the relevant directories.
Description
The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files.
Exploits (1)
This exploit leverages a file duplication vulnerability in Carello shopping cart software via the add.exe script, allowing remote users to read and write files on the target system by appending a '1' to the filename. It requires the anonymous internet account to have write access to the relevant directories.