cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error (SEC-99).