CVE-2008-5906

Description

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/46118

https://bugs.gentoo.org/show_bug.cgi?id=244741

http://www.vupen.com/english/advisories/2008/2911

http://www.ubuntu.com/usn/USN-711-1

http://www.securityfocus.com/bid/31927

http://security.gentoo.org/glsa/glsa-200902-05.xml

http://secunia.com/advisories/34003

http://secunia.com/advisories/33675

http://secunia.com/advisories/32447

http://secunia.com/advisories/32442

http://openwall.com/lists/oss-security/2009/01/08/1

http://ktorrent.org/?q=node/23

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3