Vulnerabilities > Bouzouste

DATE CVE VULNERABILITY TITLE RISK
2010-09-22 CVE-2010-3483 Permissions, Privileges, and Access Controls vulnerability in Bouzouste Primitive CMS 1.0.9
cms_write.php in Primitive CMS 1.0.9 does not properly restrict access, which allows remote attackers to gain administrative privileges via a direct request.
network
low complexity
bouzouste CWE-264
7.5
2010-09-22 CVE-2010-3482 SQL Injection vulnerability in Bouzouste Primitive CMS 1.0.9
Multiple SQL injection vulnerabilities in cms_write.php in Primitive CMS 1.0.9 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) title and (2) menutitle parameters.
network
low complexity
bouzouste CWE-89
6.5