Westpoint Security Advisory wp-02-0012 - The Carello shopping cart v1.3 uses hidden fields to specify names of executables on the server, allowing an attacker to run arbitrary commands.
9887d380b7d1e54dae208b58a265e0fcad7f19f519c4c30e79789a422c384c4c