CVE-2005-2654: Phpldapadmin Project Phpldapadmin

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disable_anon_bind is set, via an HTTP request to login.php with the anonymous_bind parameter set.

Affected products

• Phpldapadmin Project Phpldapadmin: before 0.9.6c (fixed in 0.9.6c)

Published 2005-08-30. Last modified 2026-06-16.