CVEvulnerability

CVE-2005-0795

5.0 MEDIUM Published 2005-03-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-03-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite arbitrary files via a modified vote_filename parameter.

Affected configurations

• hola holacms 1.2.9 • hola holacms 1.2.10 • hola holacms 1.4 • hola holacms 1.4.1 • hola holacms 1.4.2 • hola holacms 1.4.2a • hola holacms 1.4.3 • hola holacms 1.4.4 • hola holacms 1.4.5 • hola holacms 1.4.6 • hola holacms 1.4.7 • hola holacms 1.4.8 • hola holacms 1.4.9 • hola holacms 1.4.9 1

References