system
Describe <CVE-2005-0854>.
user
What is <CVE-2005-0854>?
assistant
betaparticle blog (bp blog), posisbly before version 4, allows remote attackers to bypass authentication and (1) upload files via a direct request to upload.asp or (2) delete files via a direct request to myFiles.asp..