CVE-2008-5906

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts...

Sql injection

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts...

DEBIAN-CVE-2008-5905

The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request...

CVE-2008-5906

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts...

CVE-2008-5905

The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request...

DEBIAN-CVE-2008-5906

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts...

CVE-2008-5905

The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request...

CVE-2008-5905

KTorrent (KDE BitTorrent client) is affected by CVE-2008-5905 and CVE-2008-5906 via the web interface plugin prior to 3.1.4. The vulnerability arises from an unauthenticated web interface that does not restrict access to torrent upload and does not properly sanitize request parameters, enabling r...

CVE-2008-5905

The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request...

CVE-2008-5906

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts...

CVE-2008-5906

KTorrent’s web interface plugin is affected by CVE-2008-5906 (and CVE-2008-5905). The vulnerability arises from improper handling of web-interface request parameters, enabling remote attackers to inject PHP code and, per Gentoo/Ubuntu advisories, potentially perform arbitrary code execution in th...

CVE-2008-5906

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts...

CVE-2008-5906

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts...

CVE-2008-5905

The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request...

openSUSE 10 Security Update : ktorrent (ktorrent-5763)

This update of ktorrent fixes several security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ktorrent-5763. The text description of this plugin is C SUSE LLC...

[SECURITY] Fedora 8 Update: ktorrent-2.2.7-2.fc8

KTorrent is a BitTorrent program for KDE. Its main features are native KDE integration, download of torrent files, upload speed capping, internet searching using various search engines, UDP Trackers and UPnP support...

Fedora 8 : ktorrent-2.2.7-2.fc8 (2008-9267)

Wed Oct 29 2008 Rex Dieter - 2.2.7-2 - multiple security issues in the web interface 469020 - Tue Jun 3 2008 Roland Wolters - 2.2.7-1 - update to bugfix version 2.2.7 - Sun Apr 20 2008 Roland Wolters - 2.2.6-2 - update to bugfix version 2.2.6 - Sun Jan 27 2008 Roland Wolters - 2.2.5-5 - updated...

Fedora 9 : ktorrent-3.1.4-1.fc9 (2008-9167)

Another bugfix release for the 3.1 series is out. This fixes several bugs : A crash caused by a SIGBUS, when diskspace preallocation is disabled High CPU usage when DNS lookups fail in the UDP tracker code Several security issues in the webinterface plugin Note that Tenable Network Security has...

[SECURITY] Fedora 9 Update: ktorrent-3.1.4-1.fc9

KTorrent is a BitTorrent program for KDE. Its main features are native KDE integration, download of torrent files, upload speed capping, internet searching using various search engines, UDP Trackers and UPnP support...

Gentoo Security Advisory GLSA 200705-01 (ktorrent)

The remote host is missing updates announced in advisory GLSA 200705-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...