Two minor comments.

• Using "/" in the last snippet is portable. It works in all three supported systems (unix, Windows and VMS).

• You mentioned code injection for the first two, but not the last even though it's also vulnerable. While it is safer, it does allow execution of arbitrary locally accessible .pm files with a known absolute path or a known relative path (wrt the current work dir).