Back to Database
Status published
Medium
CVE-2005-2624
Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to...
Vulnerability Description
Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaint_argument[] parameter to (1) calculator.asp or (2) cpaintfile.asp, which is directly fed into an eval statement.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2624
Credits & Attribution
No credits recorded in the NVD database.
More from cpaint
View All →CVE-2006-0650
Cross-site scripting (XSS) vulnerability in cpaint2.inc.php in the CPAINT library...
Medium
4.3
CVE-2005-2625
Incomplete blacklist vulnerability in the checkBlacklist function in CPAINT allows...
High
7.5
CVE-2005-2613
Unknown vulnerability in CPAINT Ajax Toolkit before 1.3-SP allows attackers...
Medium
6.4
Affected Vendor
cpaint
View all reports →Affected Software
cpaint
Vulnerable Versions:
1.3_sp
Timeline
Official Publish:
August 19th, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.