CVE-2005-1289

index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 art and possibly 2 cat parameters...