CVE-2018-18760 – RhinOS CMS 3.x - Arbitrary File Download

https://notcve.org/view.php?id=CVE-2018-18760

29 Oct 2018 — RhinOS 3.0 build 1190 allows CSRF. RhinOS 3.0 build 1190 permite Cross-Site Request Forgery (CSRF). RhinOS CMS version 3.x suffers from an arbitrary file download vulnerability. • https://packetstorm.news/files/id/150018 • CWE-352: Cross-Site Request Forgery (CSRF) •