CVE-2008-5906
Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote...
Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts.
Exploit likelihood
What each source reports
NVD Score used
Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts.
- Record
CVE-2008-5906- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts.
- Record
CVE-2008-5906- Updated
- 2026-11-02
EUVDEUVD-2008-5876 No score
Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts.
- Record
EUVD-2008-5876- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mx7w-jjcw-fj7v No score
Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote...
Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts.
- Record
GHSA-mx7w-jjcw-fj7v- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts.
- Record
CVE-2008-5906- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-5906 No score
Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts.
- Record
DEBIAN-CVE-2008-5906- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-5906 is a medium vulnerability (CVSS 6.8) in Ktorrent, published January 15, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.97%, the 80th percentile. Fixed in ktorrent 3.1.4+dfsg.1-1.
References
openwall.com/lists/oss-security/2009/01/08/1
securityfocus.com/bid/31927
ubuntu.com/usn/USN-711-1
secunia.com/advisories/32447
Show 10 moreShow less
security.gentoo.org/glsa/glsa-200902-05.xml
bugs.gentoo.org/show_bug.cgi?id=244741
ktorrent.org?q=node/23
bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178
exchange.xforce.ibmcloud.com/vulnerabilities/46118
vupen.com/english/advisories/2008/2911
nvd.nist.gov/vuln/detail/CVE-2008-5906
github.com/advisories/GHSA-mx7w-jjcw-fj7v
security-tracker.debian.org/tracker/CVE-2008-5906