The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable.
https://exchange.xforce.ibmcloud.com/vulnerabilities/4975
https://euvd.enisa.europa.eu/vulnerability/EUVD-2000-0251
http://www.securityfocus.com/bid/1115
http://archives.neohapsis.com/archives/bugtraq/2000-04/0051.html