CVE-1999-1153: Undefined Security Weakness

HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address...