Like I said, the semicolon is a generally accepted alternative to the ampersand as a parameter separator. You can either

1. url encode your data before sending it to your cgi script
2. use something other than CGI to parse your data (bad idea)
3. subclass CGI and override the parsing method
4. change the mime type of the submitted stream so CGI will place the data in the POSTDATA field rather than parse it as form and/or GET data