Happymall contains a flaw that may allow a malicious user to run arbitrary commands on the web server. The issue is triggered when an attacker uses a specially crafted URL. It is possible that the flaw may allow arbitrary code execution resulting in a loss of confidentiality, integrity, and/or availability.
Classification
Unknown or Incomplete
Solution
Currently, there are no known workarounds or upgrades to correct this issue. However, Happycgi.com has released a patch to address this vulnerability.