CVE:CVE-2005-2624
CNNVD:CNNVD-200508-196
CPAINT 1.3-SP存在eval注入漏洞。这使得远程攻击者可以借助于传递到(1)calculator.asp或(2)cpaintfile.asp的cpaint_argument[]参数执行任意ASP代码，上述代码被直接加入到eval语句中。
solution:Upgrade cpaint cpaint to a higher version than 1.3_sp,and avoid the version 1.3_sp