CVE-2001-1370: prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to ex...

Security readout for executives and security teams

CVE-2001-1370 is a legacy web application risk in PHPLib. If old PHP applications run PHPLib before 7.2d with PHP register_globals enabled, a remote attacker could cause the application to load and run script code from an attacker-controlled location. Impact can reach full compromise of the affected web application context. Exposure is most likely in very old PHP deployments, legacy Horde or IMP installations, or custom applications that still bundle PHPLib. Modern environments are unlikely to be affected unless they preserve obsolete PHP behavior and old PHPLib-dependent code. Treat this as urgent only if legacy PHP applications remain in service. For modern estates, prioritize discovery over emergency response. Any exposed affected system should be remediated quickly because the stated impact is remote arbitrary script execution. Mitigation focus: Upgrade PHPLib to 7.2d or later where still present.; Upgrade IMP to 2.2.6 or later if applicable.; Upgrade Horde versions affected by the cited advisories..

Prepared

Jun 30, 2026, 16:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.