https://blog.ogigante.com/whmcs-security-advisory-tsr-2013-009/
WHMCS Security Advisory TSR-2013-009