CVE-2018-1000171

...

CVE-2018-1000171

CVE-2018-1000171 is a reservation duplicate of CVE-2018-9092 linked to MiniCMS 1.10 CSRF in mc-admin/conf.php that can change the administrator password. The vulnerability arises from a CSRF in the admin password configuration page. Impact per linked records: password change without proper author...

CVE-2017-1000171

CVE-2017-1000171 affects Mahara Mobile prior to version 1.2.1, where passwords are logged in plaintext to the Mahara access log. The issue stems from logging sensitive credentials, enabling potential exposure of passwords via log access. Impact is information disclosure of login credentials via l...