CVE-2000-0396 json
The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the a…
published 2000-05-24 26 y ago modified 2026-06-16 4 mo ago also EUVD-2000-0395
- cvss
- 5.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 6.9%
- EPSS 6.9% chance of exploitation in 30 days, percentile 94%
- public exploits
- 1
- Exploit-DB
Summary
The add.exe program in the Carello shopping cart software allows remote attackers to duplicate files on the server, which could allow the attacker to read source code for web scripts such as .ASP files.
Timeline
- First public exploit (EDB-19957)
- Published
Exploit prediction
6.87% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-19957 Pacific Software Carello 1.2.1 - File Duplication / Source Disclosure remote, 2000-05-24
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:P/I:N/A:N |
References
-
securityfocus.com
/bid/1245
vdb-entry
-
archives.neohapsis.com
/archives/bugtraq/2000-05/0285.html
mailing-list
Sources
- CVE List CVE-2000-0396
- NVD CVE-2000-0396
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.