Lucene search
HistoryAug 19, 2005 - 4:00 a.m.
CVE-2005-2624
cve-2005-2624
eval injection
cpaint 1.3-sp
remote attackers
arbitrary code execution
asp code
vulnerability
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
8.1 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.2%
Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaint_argument[] parameter to (1) calculator.asp or (2) cpaintfile.asp, which is directly fed into an eval statement.
Affected configurations
Node
cpaintcpaintMatch1.3_sp
| CPE | Name | Operator | Version |
|---|---|---|---|
| cpaint:cpaint | cpaint | eq | 1.3_sp |
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
8.1 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.2%
Related for CVE-2005-2624