cPanel prior to 70.0.23 allows demo accounts to execute code via the Landing Page (SEC-405).
cpanel cpanel