webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/7315
https://euvd.enisa.europa.eu/vulnerability/EUVD-2001-1479