https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-3193.htmlhttps://patchthecve.com/cve/CVE-2007-3193.htmlTue, 16 Jun 2026 22:41:14 +0000HIGH 10.0: lib/WikiUser/LDAP.php in PhpWiki before 1.3.13p1, when the configuration lacks a nonzero PASSWORD_LENGTH_MINIMUM, might allow remote attackers to bypass authentication via an empty password, which causes ldap_bind to return true when used with certain LDAP implementations.https://patchthecve.com/cve/CVE-2007-2025.htmlhttps://patchthecve.com/cve/CVE-2007-2025.htmlTue, 16 Jun 2026 22:38:46 +0000HIGH 7.5: Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.11p1 allows remote attackers to upload arbitrary PHP files with a double extension, as demonstrated by .php.3, which is interpreted by Apache as being a valid PHP file.https://patchthecve.com/cve/CVE-2007-2024.htmlhttps://patchthecve.com/cve/CVE-2007-2024.htmlTue, 16 Jun 2026 22:38:46 +0000MEDIUM 6.8: Unrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1.3.x allows remote attackers to upload arbitrary PHP files with a (1) php3, (2) php4, or (3) php5 extension.