Vulnerabilities > CVE-2005-0854 - Remote vulnerability in Betaparticle Blog 2.0/3.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
betaparticle
exploit available
NVD
Published: 2005-05-02
Updated: 2017-07-11

Summary

betaparticle blog (bp blog), posisbly before version 4, allows remote attackers to bypass authentication and (1) upload files via a direct request to upload.asp or (2) delete files via a direct request to myFiles.asp.

Vulnerable Configurations

Part Description Count
Application
Betaparticle
2

Exploit-Db

descriptionbetaparticle blog 2.0/3.0 myFiles.asp Unauthenticated File Manipulation. CVE-2005-0854. Webapps exploit for asp platform
idEDB-ID:25254
last seen2016-02-03
modified2005-03-21
published2005-03-21
reporterfarhad koosha
sourcehttps://www.exploit-db.com/download/25254/
titlebetaparticle blog 2.0/3.0 myFiles.asp Unauthenticated File Manipulation

References