Avenger's News System Command Execution

Summary
A security vulnerability in Avenger's News System (ANS) allows command execution by remote attackers who have access to the ANS page.
Solution
see http://www.securiteam.com/unixfocus/5MP090A6KG.html