Lucene search
HistoryMar 20, 2005 - 5:00 a.m.
CVE-2005-0795
holacms
vulnerability
file access
remote attackers
exploit
security
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7.2 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.8%
HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite arbitrary files via a modified vote_filename parameter.
Affected configurations
Node
holaholacmsMatch1.2.9
ORholaholacmsMatch1.2.10
ORholaholacmsMatch1.4
ORholaholacmsMatch1.4.1
ORholaholacmsMatch1.4.2
ORholaholacmsMatch1.4.2a
ORholaholacmsMatch1.4.3
ORholaholacmsMatch1.4.4
ORholaholacmsMatch1.4.5
ORholaholacmsMatch1.4.6
ORholaholacmsMatch1.4.7
ORholaholacmsMatch1.4.8
ORholaholacmsMatch1.4.9
ORholaholacmsMatch1.4.9_1
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7.2 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.8%
Related for CVE-2005-0795