CVE-2005-2624

Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaint_argument[] parameter to (1) calculator.asp…

published August 19, 2005

CVSS
—
EPSS
1%
Percentile
64.1
In the wild
Unconfirmed
What it is

Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaint_argument[] parameter to (1) calculator.asp or (2) cpaintfile.asp, which is directly fed into an eval statement.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01053 · 64.1th percentile
Published
2005-08-19T04:00Z
EPSS history
Timeline
  • 19 AUG 04:00Z
    Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaint_argument[] parameter to (1) calculator.asp…
    cvelistv5