CVE-2010-3483: cms_write.php in Primitive CMS 1.0.9 does not properly restrict access, which allows remote attackers to ga...

Security readout for executives and security teams

Primitive CMS 1.0.9 has an access-control flaw in cms_write.php. A remote attacker could directly reach that function and gain administrative privileges. The same issue can enable cross-site scripting through content fields. Business urgency is highest only where this old CMS is still internet-facing. Likely limited to organizations still running Primitive CMS 1.0.9, especially public sites exposing cms_write.php or administrative write functions. The source bundle does not identify broader affected versions or CPEs. Treat as high priority for any exposed Primitive CMS site because administrative takeover can affect website integrity, customer trust, and downstream users. If the product is not present, no action is needed beyond documenting non-exposure. Mitigation focus: Inventory any Primitive CMS deployments and confirm exact version.; Remove or replace Primitive CMS 1.0.9 if no maintained fix exists.; Restrict external access to cms_write.php and administrative paths..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.