Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaint_argument[] parameter to (1) calculator.asp or (2) cpaintfile.asp, which is directly fed into an eval statement.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=112421484419768&w=2 |
Configurations
Information
Published : 2005-08-18 21:00
Updated : 2016-10-17 20:29
NVD link : CVE-2005-2624
Mitre link : CVE-2005-2624
JSON object : View
CWE
Products Affected
cpaint
- cpaint