{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-03-15T00:00:00", "descriptions": [{"lang": "en", "value": "HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite arbitrary files via a modified vote_filename parameter."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20050315 Virginity Security Advisory 2005-001 : Hola CMS - File destruction and System access", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://archives.neohapsis.com/archives/bugtraq/2005-03/0210.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.holacms.de/?content=changelog"}, {"name": "14566", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/14566"}, {"name": "hola-votefilename-directory-traversal(19672)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/19672"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-0795", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite arbitrary files via a modified vote_filename parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20050315 Virginity Security Advisory 2005-001 : Hola CMS - File destruction and System access", "refsource": "BUGTRAQ", "url": "http://archives.neohapsis.com/archives/bugtraq/2005-03/0210.html"}, {"name": "http://www.holacms.de/?content=changelog", "refsource": "CONFIRM", "url": "http://www.holacms.de/?content=changelog"}, {"name": "14566", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/14566"}, {"name": "hola-votefilename-directory-traversal(19672)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/19672"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-0795", "datePublished": "2005-03-20T05:00:00", "dateReserved": "2005-03-20T00:00:00", "dateUpdated": "2017-07-10T14:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hola:holacms:1.2.9:*:*:*:*:*:*:*", "matchCriteriaId": "6CE77009-C449-4C27-8ED1-54536C868BF0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hola:holacms:1.2.10:*:*:*:*:*:*:*", "matchCriteriaId": "D2C59F32-C782-41AB-BBCD-14AE00622251", "vulnerable": true}, {"criteria": "cpe:2.3:a:hola:holacms:1.4:*:*:*:*:*:*:*", "matchCriteriaId": "BDFA2FB3-988C-438C-91D5-CFB949D1DE72", "vulnerable": true}, {"criteria": "cpe:2.3:a:hola:holacms:1.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "6C884064-3C7F-41D0-8C2D-9E472E6A4F32", "vulnerable": true}, {"criteria": "cpe:2.3:a:hola:holacms:1.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "B174400C-B207-4244-BFB0-D21BC03B82A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:hola:holacms:1.4.2a:*:*:*:*:*:*:*", "matchCriteriaId": "ED931373-EC2F-4957-8626-5B04356D5DFF", "vulnerable": true}, {"criteria": "cpe:2.3:a:hola:holacms:1.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "41DE9C6F-E283-4A57-9AF5-623632ED564B", "vulnerable": true}, {"criteria": "cpe:2.3:a:hola:holacms:1.4.4:*:*:*:*:*:*:*", "matchCriteriaId": "1CF810F5-30EE-44F0-8A83-BC23D28693B8", "vulnerable": true}, {"criteria": "cpe:2.3:a:hola:holacms:1.4.5:*:*:*:*:*:*:*", "matchCriteriaId": "C9BCAD68-4046-48C1-8621-D67F55103E20", "vulnerable": true}, {"criteria": "cpe:2.3:a:hola:holacms:1.4.6:*:*:*:*:*:*:*", "matchCriteriaId": "F46EFD31-83A7-4EE7-B8C0-F403311D1AA0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hola:holacms:1.4.7:*:*:*:*:*:*:*", "matchCriteriaId": "864DFC9C-EF3D-4681-B4FE-5766F8EB08AB", "vulnerable": true}, {"criteria": "cpe:2.3:a:hola:holacms:1.4.8:*:*:*:*:*:*:*", "matchCriteriaId": "477C0392-2513-40D9-BD90-65B1762B3056", "vulnerable": true}, {"criteria": "cpe:2.3:a:hola:holacms:1.4.9:*:*:*:*:*:*:*", "matchCriteriaId": "61BA821F-DB55-481E-A5C4-C08B74A93BF9", "vulnerable": true}, {"criteria": "cpe:2.3:a:hola:holacms:1.4.9_1:*:*:*:*:*:*:*", "matchCriteriaId": "913CF7B2-A97C-4CA3-B01A-FCD2B5011854", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite arbitrary files via a modified vote_filename parameter."}], "id": "CVE-2005-0795", "lastModified": "2017-07-11T01:32:24.907", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-03-14T05:00:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Vendor Advisory"], "url": "http://archives.neohapsis.com/archives/bugtraq/2005-03/0210.html"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/14566"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.holacms.de/?content=changelog"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/19672"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}