Back to Database
Status published
High
CVE-2005-2625
Incomplete blacklist vulnerability in the checkBlacklist function in CPAINT allows...
Vulnerability Description
Incomplete blacklist vulnerability in the checkBlacklist function in CPAINT allows remote attackers to execute arbitrary commands via the (1) ExecuteGlobal function or (2) GetRef statement, which is not included in the blacklist.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2625
Credits & Attribution
No credits recorded in the NVD database.
More from cpaint
View All →CVE-2006-0650
Cross-site scripting (XSS) vulnerability in cpaint2.inc.php in the CPAINT library...
Medium
4.3
CVE-2005-2624
Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to...
Medium
5
CVE-2005-2613
Unknown vulnerability in CPAINT Ajax Toolkit before 1.3-SP allows attackers...
Medium
6.4
Affected Vendor
cpaint
View all reports →Affected Software
cpaint
Vulnerable Versions:
Unknown
Timeline
Official Publish:
August 19th, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.