CVE-2005-0853 - CVE House
Back to Database
Status published Medium CVE-2005-0853

betaparticle blog (bp blog) stores the database under the web...

Vulnerability Description

betaparticle blog (bp blog) stores the database under the web root, which allows remote attackers to obtain sensitive information via a direct request to (1) dbBlogMX.mdb for versions before 3.0, or (2) Blog.mdb for versions 3.0 and later. NOTE: it was later reported that vector 2 also affects versions 6.0 through 9.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-0853

Credits & Attribution

No credits recorded in the NVD database.

References

More from betaparticle

View All →
CVE-2007-1445
SQL injection vulnerability in the heme preview feature for default.asp...
High 7.5
CVE-2006-1333
Multiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and earlier...
Medium 6.4
CVE-2005-0854
betaparticle blog (bp blog), posisbly before version 4, allows remote...
High 7.5

Affected Vendor

betaparticle

View all reports →

Affected Software

betaparticle blog
Vulnerable Versions:
2.0, 3.0

Timeline

Official Publish: March 24th, 2005
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.