CVE-2005-1289

Name of the Vulnerable Software and Affected Versions: E-Cart 2004 versions 1.1 and earlier

Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the art and possibly cat parameters in the "index.cgi" file.

Recommendations: For E-Cart 2004 versions 1.1 and earlier, consider restricting access to the "index.cgi" file until a patch is available. As a temporary workaround, avoid using the art and cat parameters in the affected API endpoint until the issue is resolved.