osTicket Arbitrary File Read via PHP Filter Chains in mPDF | Metasploit Module