CNCVE编号：CNCVE-20010614 CVE编号：CAN-2001-0614 安全级别：高 漏洞中文描述： Carello E-Commerce 1.2.1及其早期版本允许远程攻击者通过一个特别构造的URL来获得额外的权限以及执行任意命令。 漏洞英文描述： Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL. 漏洞参考： Reference: BUGTRAQ:20010514 def-2001-25: Carello E-Commerce Arbitrary Command Execution Reference: URL:http://marc.theaimsgroup.com/?l=bugtraq&m=98991352402073&w=2 Reference: XF:carello-url-code-execution(6532) Reference: URL:http://xforce.iss.net/ 系统类型： Win2000/NT 漏洞类型：输入有效性检查错误