CVE-2006-4648

The CVE-2006-4648 entry describes a PHP remote file inclusion vulnerability in BinGo News (BP News) version 3.01 and earlier, affecting bp_ncom.php. An attacker can cause arbitrary PHP code execution by supplying a URL in the bnrep parameter (remote file inclusion via bnrep). The connected record...

CVE-2005-0854

The CVE-2005-0854 entry concerns betaparticle blog (bp blog) prior to version 4. It reports an authentication bypass that enables remote attackers to perform file operations via direct requests to upload.asp or myFiles.asp (upload and delete respectively). The vulnerability allows unauthorized ac...

CVE-2005-0853

The CVE-2005-0853 entry concerns betaparticle blog (bp blog) where the database files are stored under the web root, enabling direct access to sensitive data via HTTP requests. Affected files are (1) dbBlogMX.mdb for versions before 3.0, or (2) Blog.mdb for versions 3.0 and later, with vector 2 a...