Flaws in how Apache’s suexec binary has been patched by cPanel when configured for mod_php, in conjunction with cPanel’s creation of some perl scripts that are not taint clean, allow for any user to execute arbitrary code as any other user with a uid above UID_MIN.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33493/cpanelPHP.txt
Source: https://packetstormsecurity.com/files/33493/cpanelPHP.txt.html