FWIW with Vars() it returns a \0 (null) separated string for multiple values with the same param name (hash key) which was the cgi-lib.pl way or doing it. This is a compatibility method that should not really be used. As you point out all that has to be done is:

use CGI;
my $q = new CGI;

# iterate over all param names
for my $param ( $q->param() ) {
    print "<p>Param $param\n";
    # iterate over all values for param name $param
    for my $value ( $q->param($param) ) {
        print "<br> value: $value";
    }
}
[download]

cheers

tachyon

s&&rsenoyhcatreve&&&s&n.+t&"$'$`$\"$\&"&ee&&y&srve&&d&&print