Crossite scripting, command line escape.
vulners.com/securityvulns/securityvulns:doc:12319
vulners.com/securityvulns/securityvulns:doc:12333
vulners.com/securityvulns/securityvulns:doc:12334