CVE-2005-0854 - CVE House

Status published High CVE-2005-0854

betaparticle blog (bp blog), posisbly before version 4, allows remote...

7.5 CVSS

Vulnerability Description

betaparticle blog (bp blog), posisbly before version 4, allows remote attackers to bypass authentication and (1) upload files via a direct request to upload.asp or (2) delete files via a direct request to myFiles.asp.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-0854

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from betaparticle

View All →

CVE-2007-1445

SQL injection vulnerability in the heme preview feature for default.asp...

High 7.5

CVE-2006-1333

Multiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and earlier...

Medium 6.4

CVE-2005-0853

betaparticle blog (bp blog) stores the database under the web...

Medium 5

Affected Vendor

betaparticle

View all reports →

Affected Software

betaparticle blog

Vulnerable Versions:

2.0, 3.0

Timeline

Official Publish: March 24th, 2005

Last Modified: August 7th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.