I've searched around a lot, and tried various tweaks to .htaccess files to try to turn off mod_security for a particular cgi script (uber uploader) but it doesn't seem to have any effect.
The most popular one I see rehashed all over the web is:
# Turn off mod_security filtering.
# The below probably isn't needed,
# but better safe than sorry.
Which looks relative simple to me - if "SecFilterEngine" is in some way related to mod_security of course. Shame it has absolutely no effect!
Does anyone have a suggested way I can simply disable it for a request to any file in my cgi-bin directory?