CVE-2010-3482: Multiple SQL injection vulnerabilities in cms_write.php in Primitive CMS 1.0.9 allow remote authenticated a...

Security readout for executives and security teams

Primitive CMS 1.0.9 has SQL injection flaws in an administrative page. An authenticated administrator could manipulate database queries through page title fields. The CVE notes a possible chain with CVE-2010-3483 that may remove the authentication requirement. This matters most for any legacy Primitive CMS deployment still reachable. Likely exposure is limited to organizations still running Primitive CMS 1.0.9, especially where administrative CMS routes are internet-accessible. The bundle’s affected-product metadata is incomplete, so exposure should be confirmed through asset inventory, application fingerprints, and file-path evidence. Treat this as high priority only if Primitive CMS 1.0.9 exists in the environment. The product appears old and likely uncommon, but reachable legacy CMS software with public exploit references and possible unauthenticated chaining creates unacceptable business risk. Mitigation focus: Identify and remove or isolate any Primitive CMS 1.0.9 deployments.; Check vendor or project guidance for any available fixed release or advisory.; Restrict CMS administrative paths to trusted networks and authenticated operators..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.