The popular CGI web page access counter version 4.0.7 by George Burgyan allows execution of arbitrary commands due to unchecked user input. Commands are executed with the same privilege as the web server.
e0a35b69e4f5aef2395340390b513acaf3525217945eb4350d781f82b87e195f