Skip to content
OpenAdvisories
Unscored CVE-2018-18487 EUVD-2018-10212GHSA-p723-226c-99cr

In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, the database backup filename generation uses mt_rand() unsafely, resulting in pre…

Published Oct 18, 2018 · Updated Sep 17, 2024 · Assigned by mitre

Description

In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, the database backup filename generation uses mt_rand() unsafely, resulting in predictable database backup file locations.

References