CVE-2005-0795 HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite arbitrary files via a modified vote_filename parameter.
MediumCVSS 5.0
EPSS 2.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite arbitrary files via a modified vote_filename parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| holacms | = 1.2.9 | No fix listed |
| holacms | = 1.2.10 | No fix listed |
| holacms | = 1.4 | No fix listed |
| holacms | = 1.4.1 | No fix listed |
| holacms | = 1.4.2 | No fix listed |
| holacms | = 1.4.2a | No fix listed |
| holacms | = 1.4.3 | No fix listed |
| holacms | = 1.4.4 | No fix listed |
| holacms | = 1.4.5 | No fix listed |
| holacms | = 1.4.6 | No fix listed |
| holacms | = 1.4.7 | No fix listed |
| holacms | = 1.4.8 | No fix listed |
| holacms | = 1.4.9 | No fix listed |
| holacms | = 1.4.9_1 | No fix listed |
References
- 20050315 Virginity Security Advisory 2005-001 : Hola CMS - File destruction and System access exploit mailing-list vendor-advisory
- 14566 patch third-party-advisory vendor-advisory
- www.holacms.de patch vendor-advisory
- hola-votefilename-directory-traversal(19672) vdb-entry