Credit Larry Cashdollar for report of shell injection vulnerability.