cPanel 11.19.1-DEMO_21586 - access other users' cPanel and WHM accounts via a symlink attack in Horde combined with a cPanel design issue


See this article for full details.