CVE-2008-5906

Description

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts.

How to fix CVE-2008-5906

To remediate CVE-2008-5906, upgrade the affected package to a fixed version below.

• Debian/ktorrent—upgrade to 3.1.4+dfsg.1-1 or later

Is CVE-2008-5906 being exploited?

Low — EPSS is 1.2%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 3.1.4+dfsg.1-1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2008-5906