CVE-2018-20937

cPanel before 68.0.27 does not validate database and dbuser names during renames (SEC-321).

Source: CVE-2018-20937