CVE-2005-1289

index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and possibly (2) cat parameters.

Date published : 2005-04-26

http://marc.info/?l=bugtraq&m=111428818425864&w=2

http://securitytracker.com/id?1013780