CVE-2001-0985

shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the "page" parameter.

Date published : 2002-02-02

http://www.securityfocus.com/bid/3308

http://www.securityfocus.com/archive/1/212827