The options used by cPanel software to compile Apache 1.3.29 and PHP using the mod_phpsuexec option are flawed and allow any local user to execute arbitrary code as any other user owning a web accessible php file.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33412/cpanelApache.txt
Source: https://packetstormsecurity.com/files/33412/cpanelApache.txt.html