Launchpad.net

CVE 2016-10800

cPanel before 58.0.4 allows demo-mode escape via Site Templates and Boxtrapper API calls (SEC-138).

See the CVE page on Mitre.org for more details.

References