RhinOS Cross-Site Request Forgery Vulnerability

RhinOS is a set of Web development framework . A cross-site request forgery vulnerability exists in RhinOS version 3.0 build 1190. A remote attacker can exploit this vulnerability to download arbitrary files...

CVE-2018-18760

RhinOS 3.0 build 1190 allows CSRF...

CVE-2018-18760

CVE-2018-18760 affects RhinOS 3.0 build 1190 (RhinOS CMS 3.x). Connected sources describe a Cross-Site Request Forgery (CSRF) vulnerability that enables arbitrary file download through the web interface (e.g., download.php triggering with crafted parameters such as file/name/size/type). The explo...