Unscored CVE-2005-2625 EUVD-2005-2626GHSA-7mfh-pq9h-v39p

Incomplete blacklist vulnerability in the checkBlacklist function in CPAINT allows remote attackers to execute arbitrary commands via the (…

Published Aug 19, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Incomplete blacklist vulnerability in the checkBlacklist function in CPAINT allows remote attackers to execute arbitrary commands via the (1) ExecuteGlobal function or (2) GetRef statement, which is not included in the blacklist.

References

20050816 RE: Vulnerability found in CPAINT Ajax Toolkit mailing-list