Of the five ISBN modules that I could find on CPAN, the most relevant for your "CGI-Perl problem" is probably CGI::Untaint::isbn. It will untaint and validate an ISBN passed as a CGI parameter.

Other (less) relevant modules are: Test::ISBN and Business::ISBN.