AFAIK the cgi-script should print the imagedata instead of the imagelocation.

open(IMG, "../images/pic1.png") or die ($!);
print while(<IMG>)
close(IMG);
[download]

uhm, or something similar :)
nevertheless, I may be wrong with this assumption.

--
trust in bash
but tie your camel