https://blog.ogigante.com/whmcs-security-advisory-tsr-2014-0003/
WHMCS Security Advisory TSR-2014-0003