Feeling Lucky
000-CMS
[#109] - Security Flaw in all versions of Joomla
- Closed
- 16 May 2013
- Medium
- Build: master
- # 109
When accessing the global configuration page and modifying settings, if the logged in user has saved their login credentials in browser, their username and password will be stored in the configuration.php file in plain text for the STMP user and SMTP password
- 
You need to address this on the Joomla CMS repo: github.com/joomla/joomla-cms