Description
Directory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on the server via a .. (dot dot) in the VBEXE parameter.
References
- 20020710 wp-02-0012: Carello 1.3 Remote File Execution mailing-list
- 5192 vdb-entry
- 20020710 wp-02-0012: Carello 1.3 Remote File Execution mailing-list
- 6592 vdb-entry
- carello-local-file-execution(9521) vdb-entry