CGUI doesn't comment shell characters in user input on call to external application.
vulners.com/securityvulns/securityvulns:doc:2697