Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2005-1289

index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and possibly (2) cat parameters.