CVE-2007-3193: Phpwiki

High severity, CVSS 10.0. EPSS: 3.5% chance of exploitation in the next 30 days.

lib/WikiUser/LDAP.php in PhpWiki before 1.3.13p1, when the configuration lacks a nonzero PASSWORD_LENGTH_MINIMUM, might allow remote attackers to bypass authentication via an empty password, which causes ldap_bind to return true when used with certain LDAP implementations.

Affected products

• Phpwiki Phpwiki: up to and including 1.3.13

Published 2007-06-12. Last modified 2026-06-16.