The same as for phpsuexec, the CGI script must be chmod no higher that 755 and the directory that they're within should be no higher than 755.
I don't understand your upload question. You upload files as you always would do, via FTP. IF you still have old files that are owned by nobody:nobody you need to chown them under the root account to user:user instead.