I-Mall Commerce is susceptible to remote arbitrary command execution due to a lack of variable sanity checking.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33726/ZH2004-15SA.txt
Source: https://packetstormsecurity.com/files/33726/ZH2004-15SA.txt.html