CGI is a major source of security problems in Web servers, since it allows a client to activate (execute) custom programs on the server. There are several potential vulnerabilities, including:
A legitimate CGI program may have security holes that allow an intruder to execute unauthorised commands or to discover information about the system.
If uploading of files is allowed, intruders may manipulate to place their own malicious CGI programs on your server without your knowledge.