The script isn't insecure because it was written in Perl. The script was insecure because it blindly accepted user input as the recipient. It's as easy to make this mistake in Perl as it is in PHP, Java or C.

The mistake was made before the language it was written in became significant.

Abigail