Description
CatalogMgr.pl in VirtualCatalog (incorrectly claimed to be in VirtualCart) allows remote attackers to execute arbitrary code via the template parameter.
References
- 20010611 re: Advisory #5 Corrections. mailing-list
- 20010607 cgisecurity.com Advisory #5 mailing-list