Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-3482. PoCs published by Stephan Sattler.
AI-analyzed exploit summary The exploit details multiple vulnerabilities in Primitive CMS 1.0.9, including unauthorized access, HTML injection, and blind SQL injection. It provides vulnerable code snippets and PoC examples for SQL injection via POST parameters.
Description
Multiple SQL injection vulnerabilities in cms_write.php in Primitive CMS 1.0.9 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) title and (2) menutitle parameters. NOTE: this can be leveraged with CVE-2010-3483 to conduct attacks without authentication.
Exploits (1)
The exploit details multiple vulnerabilities in Primitive CMS 1.0.9, including unauthorized access, HTML injection, and blind SQL injection. It provides vulnerable code snippets and PoC examples for SQL injection via POST parameters.