To carry out such an attack, it is enough to have a directory on the site configured using the "Alias" or "ScriptAlias" directives (DocumentRoot is not enough), such as "cgi-bin."
Si aad u fuliso weerarka noocaas ah, si fudud u hag tusaha goobta lagu habeeyay adeegsiga tilmaamaha "Alias" ama "ScriptAlias" (DocumentRoot kuma filna), sida "cgi-bin."