2018-10-18 21:00:00
mitre
PUBLISHED
In libadminactiondataaction.class.php in Gxlcms v2.0, the database backup filename generation uses mt_rand() unsafely, resulting in predictable database backup file locations.