It definitely can’t. Either you had to put your script in cgi-bin, use an extension like .cgi in a directory with that feature explicitly enabled, or a magic sticky bit on the file if that was enabled.

You could configure the server to be insecure by, eg, allowing cgi execution from a directory where uploaded files are stored.