CVE-2008-5906

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts.

Weaknesses (CWE)

CWE-20

Affected Products (38)

ktorrent · ktorrentvulnerable

References (20)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178

http://ktorrent.org/?q=node/23

Vendor Advisory

http://openwall.com/lists/oss-security/2009/01/08/1

http://secunia.com/advisories/32442

Vendor Advisory

http://secunia.com/advisories/32447

Vendor Advisory

http://secunia.com/advisories/33675

http://secunia.com/advisories/34003

http://security.gentoo.org/glsa/glsa-200902-05.xml

http://www.securityfocus.com/bid/31927

http://www.ubuntu.com/usn/USN-711-1

http://www.vupen.com/english/advisories/2008/2911

https://bugs.gentoo.org/show_bug.cgi?id=244741

https://exchange.xforce.ibmcloud.com/vulnerabilities/46118

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178

http://ktorrent.org/?q=node/23

Vendor Advisory

http://openwall.com/lists/oss-security/2009/01/08/1

http://secunia.com/advisories/32442

Vendor Advisory

http://secunia.com/advisories/32447

Vendor Advisory

http://secunia.com/advisories/33675

http://secunia.com/advisories/34003