← Database

CVE-2009-2117

HIGH CVSS: 7.5 Published: 2009-06-18 Modified: 2026-06-16

Description

uye_paneli.php in phPortal 1.0 allows remote attackers to bypass authentication and obtain administrative access by setting the kulladi cookie to a valid username.

Affected Platforms

Phportal Phportal

Weakness Type

CWE-287

References