1. Home
  2. CVE Database
  3. CVE-2005-2625
HIGH · 7.5

CVE-2005-2625

Incomplete blacklist vulnerability in the checkBlacklist function in CPAINT allows remote attackers to execute arbitrary commands via the (1) ExecuteGlobal function or (2) GetRef statement, which is n...

Vulnerability Description

Incomplete blacklist vulnerability in the checkBlacklist function in CPAINT allows remote attackers to execute arbitrary commands via the (1) ExecuteGlobal function or (2) GetRef statement, which is not included in the blacklist.

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
CpaintCpaintAll versions

References

FAQ

What is CVE-2005-2625?

CVE-2005-2625 is a vulnerability with a CVSS score of 7.5 (HIGH). Incomplete blacklist vulnerability in the checkBlacklist function in CPAINT allows remote attackers to execute arbitrary commands via the (1) ExecuteGlobal function or (2) GetRef statement, which is n...

How severe is CVE-2005-2625?

CVE-2005-2625 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2005-2625?

Check the references section above for vendor advisories and patch information. Affected products include: Cpaint Cpaint.