uye_paneli.php in phPortal 1.0 allows remote attackers to bypass authentication and obtain administrative access by setting the kulladi cookie to a valid username.
References
Configurations
Information
Published : 2009-06-18 14:30
Updated : 2017-09-28 18:34
NVD link : CVE-2009-2117
Mitre link : CVE-2009-2117
JSON object : View
CWE
CWE-287
Improper Authentication
Products Affected
phportal
- phportal