The CGI script probably has insufficient permissions to call shutdown.

See system for how to check the executed command for errors.

Oh, and make sure the URL is password-protected, otherwise googlebot will reboot your machine...