EIP-2026-100806

The exploit demonstrates a command injection vulnerability in GlobalNoteScript's read.cgi script via the 'file' URI parameter, which is passed unsanitized to Perl's open() routine. This allows remote command execution in the context of the web server.