Help for this page
$user=$ARGV[1] # user the jr admin wants to change if ($user ne "root"){ ... (**NOTE: this is here in WAY simplistic form & theory just to illustrate the point)
page.cgi?page=1
page.cgi?page=page.cgi%00 (%00 == '\0' escaped)
$file="/etc/passwd\0.txt.whatever.we.want"; die("hahaha! Caught you!) if($file eq "/etc/passwd"); if (-e $file){ open (FILE, ">$file");}
$insecure_data=~s/\0//g;
s**lil*; $*=join'',sort split q**; s;.*;grr; &&s+(.(.)).+$2$1+; $; = qq-$_-;s,.*,ahc,;$,.=chop for split q,,,reverse;print for($,,$;,$*,$/)