This exec should fail, because it does not exist:
<!--#exec cgi="../../include.cgi"-->
Right?