Get Demo
The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.