manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote malicious users to execute arbitrary code via a URL that contains shell metacharacters.
marcus s. xenakis unix manual 1.0