CVE-2005-0795 in CMSinfo

Summary

HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite arbitrary files via a modified vote_filename parameter.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

03/20/2005

Disclosure

03/14/2005

Moderation

VulDB entry created

Entries

CPE

ready

CWE

CWE-22

Exploit

Download

CVSS

5.3

EPSS

0.04826

CTI

0.00

Sources

MITRE	https://www.cve.org/CVERecord?id=CVE-2005-0795
NVD	https://nvd.nist.gov/vuln/detail/CVE-2005-0795
CVE Details	https://www.cvedetails.com/cve/CVE-2005-0795/

◂ Previous Overview Next ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!