Just the same, you could add an extra arg on the end of the cgi request:
http://www.example.com/foo.cgi?param1=foo¶m2=bar&extrasneakyextrap
+aram=foobar
This assumes that the cgi does no sanity checking on args it recieves.
BlueLines
Disclaimer:
This post may contain inaccurate information, be habit forming, cause atomic warfare between peaceful countries, speed up male pattern baldness, interfere with your cable reception, exile you from certain third world countries, ruin your marriage, and generally spoil your day. No batteries included, no strings attached, your mileage may vary.