7 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.7%
The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request.
bugzilla.redhat.com/show_bug.cgi?id=468983
nvd.nist.gov/vuln/detail/CVE-2008-5905
www.cve.org/CVERecord?id=CVE-2008-5905