https://blog.ogigante.com/whmcs-security-advisory-tsr-2013-010/
WHMCS Security Advisory TSR-2013-010