cPanel prior to 60.0.25 allows file-overwrite operations during preparation for MySQL upgrades (SEC-161).
cpanel cpanel