login.cgi in Community Link Pro Web Editor allows remote attackers to execute arbitrary commands via the file parameter.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-2112
http://www.badroot.org/advisories/SA0x05
http://securitytracker.com/id?1014345