Hassan Consulting Shopping Cart Version 1.x remote exploit that will spawn a bash shell with the webserver uid.