read.cgi in GlobalNoteScript allows remote malicious users to execute arbitrary commands via shell metacharacters in the file parameters.
globalnotescript globalnotescript