cPanel prior to 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356).
cpanel cpanel