in reply to cgi file upload without a form

Perhaps with a plugin, but in general, no.

Consider the case where you visit a site. Should the site be able to specify that it wants to grab c:\autoexec.bat (or worse) from your system, or should you, the user, instead be required to pass the file to the server.

As I said, however, with a plugin, all bets are off.

--MidLifeXis