CVE-2005-1289

CVE-2005-1289 affects E-Cart 2004 1.1 and earlier. The issue is in index.cgi where user-supplied parameters (art and possibly cat) allow shell metacharacters to be interpreted, enabling remote execution of arbitrary commands. This is a remote code execution vulnerability with network access and n...