WHMCS version 3.x.x suffers from a local file disclosure vulnerability.
6aef4d28bb5de1492a986f8df6fef4f00c86ec25e740dcf4942372b2e657d37a
AM4SS version 1.2 add administrator cross site request forgery exploit.
605abe63915e90bb7e2e39fc6d38ae98fda50cc770105dc6483dba26be671d9a