CVE-2005-0854

Description

betaparticle blog (bp blog), posisbly before version 4, allows remote attackers to bypass authentication and (1) upload files via a direct request to upload.asp or (2) delete files via a direct request to myFiles.asp.

Affected products

• betaparticle / betaparticle_blog2.0 – 2.0
• betaparticle / betaparticle_blog3.0 – 3.0

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/19781
• MISChttp://blog.betaparticle.com/template_permalink.asp?id=68
• VENDOR_ADVISORYhttp://secunia.com/advisories/14668
• MAILING_LISThttp://seclists.org/lists/bugtraq/2005/Mar/0360.html
• MISChttp://www.securityfocus.com/bid/12861