PatchTheCVEholacms vulnerabilities and fixes
Recent CVEs affecting holacms, with upgrade or downgrade steps. 2 tracked.
holacms has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-04-12. Highest priority: CVE-2005-0795 (score 44/100).
- CVE-2007-1977 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in index_cms.php in holaCMS 1.4.10 allows remote attackers to inject
- CVE-2005-0795 MEDIUM 5.0 DOWNGRADE HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to ov
FAQ
How do I fix holacms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is holacms being exploited right now?
None of the tracked holacms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which holacms CVE should I patch first?
CVE-2005-0795 currently ranks highest (44/100): HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to ov.