https://scriptics.ir/blog/2013/10/whmcs-vulnerability/