CVE-2002-0683

Directory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on the server via a .. dot dot in the VBEXE parameter...

CVE-2002-0683

Carello 1.3 is affected by a directory traversal vulnerability that allows remote code execution via a .. (dot dot) in the VBEXE parameter. The issue is exploitable over the network with no authentication (CVSSv2 base score 7.5, HIGH; confidentiality, integrity, and availability are partially aff...