The dansie shopping cart application cart.pl allows remote malicious users to execute commands via a shell metacharacters in a form variable.
craig dansie dansie shopping cart 3.0.4