CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/2251
https://euvd.enisa.europa.eu/vulnerability/EUVD-1999-1044