cPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path (SEC-46).
| Software | From | Fixed in |
|---|---|---|
| cpanel / cpanel | 11.48.0.5 | 11.48.5.2 |
| cpanel / cpanel | 11.50.0.4 | 11.50.4.3 |
| cpanel / cpanel | 11.54.0.0 | 11.54.0.4 |
| cpanel / cpanel | 11.51.9999.98 | 11.52.2.4 |