If server uses .bat files as CGI it's possible to execute any shell commands by using pipes.
vulners.com/securityvulns/securityvulns:doc:2663