cPanel prior to 11.54.0.4 allows arbitrary file-overwrite operations in scripts/check_system_storable (SEC-78).
cpanel cpanel