CGI versions before 5.00 for Perl contain a vulnerability where the Content-Disposition header's attachment filename parameter is susceptible to injection via unescaped double quotes. This allows an attacker to inject a second filename parameter by manipulating the attachment name, potentially altering the filename under which the response is saved.