weblibs.pl in WebLibs 1.0 allows remote malicious users to execute arbitrary commands via shell metacharacters in the TextFile parameter.
darryl burgdorf weblibs 1.0