in reply to Re: Hacking CGI - security and exploitationin thread Hacking CGI - security and exploitation
Of course not checking for directory traversal (../../..) is an even worse mistake. But bonus points for three arg open...