<?php
function update_query($table, $array, $where) {
    #[...]
    if (substr($value, 0, 11) == 'AES_ENCRYPT') {
        $query .= $value.',';
        continue;
    }
    #[...]
    $result = mysql_query($query, $whmcsmysql);
 }
?>



and download exploit from following link

Exploit in python:

http://www.mediafire.com/download/bep724fwr8t4scl/whmcs.py


Exploit in php:

http://www.mediafire.com/download/5y10bzblp9bo92q/cyberaon(2).php

Register a new user on a target WHMCS install (/register.php)

 
and edit the exploit with site name, email and password.