cPanel prior to 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error (SEC-99).
cpanel cpanel