cPanel prior to 64.0.21 allows demo accounts to execute Cpanel::SPFUI API commands (SEC-246).
cpanel cpanel