The SQLite journal feature in cPanel prior to 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore (SEC-58).
cpanel cpanel