CVE-2007-1571: PHP remote file inclusion vulnerability in includes/base.php in Radical Designs Activist Mobilization Platf...

Security readout for executives and security teams

This is an old PHP remote file inclusion issue in Radical Designs Activist Mobilization Platform 3.2. If the site runs with register_globals enabled, an attacker could make the application load attacker-controlled PHP through base_path, leading to arbitrary server-side code execution. Exposure is likely limited to legacy AMP 3.2 deployments reachable over the web and configured with register_globals enabled. Modern PHP environments are less likely to expose this exact condition, but old nonprofit, campaign, or activist sites may still carry abandoned code. Treat this as high priority only if AMP 3.2 is still deployed. The business risk is full compromise of a legacy web server, but exposure depends on a specific outdated product and PHP configuration. Mitigation focus: Identify any Radical Designs AMP 3.2 deployments.; Disable PHP register_globals where still present.; Check vendor or maintainer guidance for updates or replacement paths..

Prepared

Jun 29, 2026, 06:37 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.