CGI versions for Perl prior to 5.00 return uploaded filenames including any client-supplied path segments, such as ../ or Windows-style paths. This means the filename is taken directly from the Content-Disposition header without sanitization. Applications that save uploaded files using this name risk writing files outside the intended directory.