cPanel prior to 70.0.23 allows local privilege escalation via the WHM Legacy Language File Upload interface (SEC-379).
cpanel cpanel