CVE-2018-1000171

CVE-2018-1000171 is a reservation duplicate of CVE-2018-9092 linked to MiniCMS 1.10 CSRF in mc-admin/conf.php that can change the administrator password. The vulnerability arises from a CSRF in the admin password configuration page. Impact per linked records: password change without proper author...