CVE-2009-2117: uye_paneli.php in phPortal 1.0 allows remote attackers to bypass authentication and obtain administrative a...

Security readout for executives and security teams

CVE-2009-2117 is an authentication bypass in phPortal 1.0. An attacker could gain administrative access by manipulating a browser cookie to impersonate a valid username. This is high impact where the old application is still reachable, but the provided sources do not show active exploitation or a named patch. Exposure appears limited to organizations still running phPortal 1.0, especially internet-facing deployments with the affected administrative panel reachable. The bundle does not identify other affected products or versions. Treat as urgent if phPortal 1.0 is present and exposed. The business risk is direct administrative compromise of an outdated web application. If the product is not deployed, no action is needed beyond confirming inventory. Mitigation focus: Identify and prioritize any phPortal 1.0 deployments.; Check vendor or project guidance; sources do not name a patch.; Restrict public access to the affected admin panel..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.