CVE-2002-1560: index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges...

Security readout for executives and security teams

CVE-2002-1560 is an authentication bypass in the legacy gBook 1.4 guestbook application. A remote user could cause the application to treat them as logged in and gain administrative privileges. Business urgency is low unless this old software is still internet-facing, but any confirmed exposure should be removed or contained quickly. Exposure is most likely in very old PHP sites, archived guestbook deployments, forgotten subdirectories, or legacy hosting accounts still running gBook 1.4. Modern environments are unlikely to be affected unless they preserve this specific application. Treat as high priority only if gBook 1.4 is present and reachable. The vulnerability grants administrative access, but the technology is obsolete and likely absent from most current estates. Asset discovery is the key decision point. Mitigation focus: Inventory public web roots for gBook 1.4 or copied gBook files.; Remove or retire exposed gBook 1.4 installations where possible.; If business-required, restrict access with server-side authentication and IP controls..

Prepared

Jun 30, 2026, 03:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.