Code injection

cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls SEC-242...