cPanel prior to 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138).
cpanel cpanel