classifieds.cgi allows remote attackers to read arbitrary files via shell metacharacters.
CVSS Metrics