CVE-2005-1289 Information

Description

index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and possibly (2) cat parameters.

Reference

http://marc.info/?l=bugtraq&m=111428818425864&w=2 http://secunia.com/advisories/15054 http://securitytracker.com/id?1013780