CVE-2008-5906

Summary

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://openwall.com/lists/oss-security/2009/01/08/1
• http://www.securityfocus.com/bid/31927
• http://www.ubuntu.com/usn/USN-711-1
• http://secunia.com/advisories/32447
• http://secunia.com/advisories/32442
• http://secunia.com/advisories/34003
• http://security.gentoo.org/glsa/glsa-200902-05.xml
• https://bugs.gentoo.org/show_bug.cgi?id=244741
• http://secunia.com/advisories/33675
• http://ktorrent.org/?q=node/23
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46118
• http://www.vupen.com/english/advisories/2008/2911

References

• http://openwall.com/lists/oss-security/2009/01/08/1
• http://www.securityfocus.com/bid/31927
• http://www.ubuntu.com/usn/USN-711-1
• http://secunia.com/advisories/32447
• http://secunia.com/advisories/32442
• http://secunia.com/advisories/34003
• http://security.gentoo.org/glsa/glsa-200902-05.xml
• https://bugs.gentoo.org/show_bug.cgi?id=244741
• http://secunia.com/advisories/33675
• http://ktorrent.org/?q=node/23
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46118
• http://www.vupen.com/english/advisories/2008/2911

• ←Previous
• Next→