CVE-2005-0795

Published: Mar 14, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite arbitrary files via a modified vote_filename parameter.

Affected (14)

Products: Hola: Holacms

Hola

1 product

Holacms

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Hola Holacms	Version 1.2.10
Hola Holacms	Version 1.2.9
Hola Holacms	Version 1.4.1
Hola Holacms	Version 1.4.2
Hola Holacms	Version 1.4.2a
Hola Holacms	Version 1.4.3
Hola Holacms	Version 1.4.4
Hola Holacms	Version 1.4.5
Hola Holacms	Version 1.4.6
Hola Holacms	Version 1.4.7
Hola Holacms	Version 1.4.8
Hola Holacms	Version 1.4.9
Hola Holacms	Version 1.4.9_1
Hola Holacms	Version 1.4