Description
The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters.
Affected products
- akopia / minivend3.0 – 3.0
- akopia / minivend4.0 – 4.0
- akopia / minivend4.0.4 – 4.0.4