athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass parameter.Referenceshttp://www.securityfocus.com/bid/9349http://www.osvdb.org/16861
