TI-2005-00739 CVE-2005-0795 · GHSA-rrfp-966g-v3mqHolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows…Priority LOW 27HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite arbitrary files via a modified vote_filename parameter.CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02437 · Published 2005-03-20 · No fix listed