Contents-Mall before 15 does not properly handle passwords which allows remote attackers to discover the administrative password and consequently obtain sensitive information or modify data via unspecified vectors.