CVE-2017-18438

cPanel before 64.0.21 allows demo accounts to execute code via Encoding API calls (SEC-242).

Source: CVE-2017-18438