Thanks to everybody here. Steve's comment made me go and check the form tag, which had method="action".

I had achieved that by passing CGI::start_multipart_form some wrong parameters. I was passing a hash (method => 'POST', action => 'action.pl'). It actually takes a list ('POST', 'action.pl').