これ2.cgi大丈夫?
http://www.walbrix.com/jp/blog/2014-09-bash-code-injection.html