CVE-2010-3483 | BDVDB-2026-43372 Detail

Description#

cms_write.php in Primitive CMS 1.0.9 does not properly restrict access, which allows remote attackers to gain administrative privileges via a direct request. NOTE: this vulnerability can be leveraged to conduct cross-site scripting attacks, as demonstrated using the (1) title, (2) content, and (3) menutitle parameters.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12010-09-22Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.