Code injection

cPanel before 59.9999.145 allows arbitrary file-read operations because of a multipart form processing error SEC-154...