CVE-2005-2625: Cpaint

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Incomplete blacklist vulnerability in the checkBlacklist function in CPAINT allows remote attackers to execute arbitrary commands via the (1) ExecuteGlobal function or (2) GetRef statement, which is not included in the blacklist.

Affected products

• Cpaint Cpaint: any version

Published 2005-08-19. Last modified 2026-06-16.