Описание
Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaint_argument[] parameter to (1) calculator.asp or (2) cpaintfile.asp, which is directly fed into an eval statement.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:cpaint:cpaint:1.3_sp:*:*:*:*:*:*:*
EPSS
Процентиль: 56%
0.00336
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaint_argument[] parameter to (1) calculator.asp or (2) cpaintfile.asp, which is directly fed into an eval statement.
EPSS
Процентиль: 56%
0.00336
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other