Percent is a "special character" in url / query strings: the following data is taken as a character.
Double up on your '%' characters:
explorer.exe "http://codeproject.com/cgi-bin/main-cgi?json=%%7b%%%%22cmd%%22%%3a654%%2c%%22bEnabled%%22%%3a1%%7d"
and they wioll pass through as percent characters.