high7.5Public exploit code
CVE-2005-1289
index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and possibly (2) cat par…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- E-Cart 1.1 - 'index.cgi' Remote Command Execution2005-04-25 · webapps · cgi · Verified
Impact
index.cgi in E-Cart 2004 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and possibly (2) cat parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| E-Cart | E-Cart | Version 2004_1.1 |