CVE-2009-2117: Improper Authentication

uyepaneli.php in phPortal 1.0 allows remote attackers to bypass authentication and obtain administrative access by setting the kulladi cookie to a valid username...