CVE-2007-3193

CRITICAL 10.0CVE-2007-3193 · Published 12/06/2007 · updated 16/06/2026

In short

CVE-2007-3193 is a CRITICAL (CVSS 10.0) vulnerability affecting phpwiki (phpwiki).
Chance of exploitation in the next 30 days (EPSS): 3.5%, higher than 89.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phpwiki phpwiki	`≤ 1.3.13`	No fix yet

Description

lib/WikiUser/LDAP.php in PhpWiki before 1.3.13p1, when the configuration lacks a nonzero PASSWORD_LENGTH_MINIMUM, might allow remote attackers to bypass authentication via an empty password, which causes ldap_bind to return true when used with certain LDAP implementations.

References

osvdb.org/37219
secunia.com/advisories/25595 · Patch
secunia.com/advisories/26784
secunia.com/advisories/26880
security.gentoo.org/glsa/glsa-200709-10.xml
sourceforge.net/project/shownotes.php
sourceforge.net/tracker/index.php
debian.org/security/2007/dsa-1371
vupen.com/english/advisories/2007/2144
exchange.xforce.ibmcloud.com/vulnerabilities/34819

More vulnerabilities in phpwiki

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free