Vulnerabilities > CVE-2005-2625 - Remote Security vulnerability in CPAINT
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Incomplete blacklist vulnerability in the checkBlacklist function in CPAINT allows remote attackers to execute arbitrary commands via the (1) ExecuteGlobal function or (2) GetRef statement, which is not included in the blacklist.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |