CMS RIMI version 1.3 suffers from cross site request forgery and arbitrary file upload vulnerabilities.