TI-2018-04881 CVE-2018-6623 · GHSA-7x7c-8qxj-65f3
An issue was discovered in Hola 1.79.859.
Priority MEDIUM 40
An issue was discovered in Hola 1.79.859.
No Hola vulnerabilities are listed in CISA KEV.
3 records
An issue was discovered in Hola 1.79.859.
Hola VPN 1.34 has weak permissions (Everyone:F) under %PROGRAMFILES%, which allows local users to gain privileges via a Trojan horse 7za.exe or hola.exe file.
HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite arbitrary files via a modified vote_filename parameter.