CVE-2005-2624

2005-08-19T04:00:00
ID CVE-2005-2624
Type cve
Reporter cve@mitre.org
Modified 2016-10-18T03:29:00

Description

Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaint_argument[] parameter to (1) calculator.asp or (2) cpaintfile.asp, which is directly fed into an eval statement.