CVE-2018-18487: Exposure of Sensitive Information to an Unauthorized Actor

In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, the database backup filename generation uses mtrand unsafely, resulting in predictable database backup file locations...