CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field.Referenceshttp://www.securiteam.com/unixfocus/5MP0M2K5FC.htmlhttp://www.securityfocus.com/bid/3360https://exchange.xforce.ibmcloud.com/vulnerabilities/7178
