CVE-2001-0614: Carello E-Commerce

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL.

Affected products

• Carello E-Commerce: up to and including 1.2.1

Published 2001-08-22. Last modified 2026-06-16.