CVE-2008-5906

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts.

• CWE-20

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178
• http://ktorrent.org/?q=node/23Vendor Advisory
• http://openwall.com/lists/oss-security/2009/01/08/1
• http://secunia.com/advisories/32442Vendor Advisory
• http://secunia.com/advisories/32447Vendor Advisory
• http://secunia.com/advisories/33675
• http://secunia.com/advisories/34003
• http://security.gentoo.org/glsa/glsa-200902-05.xml
• http://www.securityfocus.com/bid/31927
• http://www.ubuntu.com/usn/USN-711-1
• http://www.vupen.com/english/advisories/2008/2911
• https://bugs.gentoo.org/show_bug.cgi?id=244741
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46118
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504178
• http://ktorrent.org/?q=node/23Vendor Advisory
• http://openwall.com/lists/oss-security/2009/01/08/1
• http://secunia.com/advisories/32442Vendor Advisory
• http://secunia.com/advisories/32447Vendor Advisory
• http://secunia.com/advisories/33675
• http://secunia.com/advisories/34003
• http://security.gentoo.org/glsa/glsa-200902-05.xml
• http://www.securityfocus.com/bid/31927
• http://www.ubuntu.com/usn/USN-711-1
• http://www.vupen.com/english/advisories/2008/2911
• https://bugs.gentoo.org/show_bug.cgi?id=244741
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46118

Published

Jan 15, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-5900CodeAvalanche Articles stores sensitive information under th…
• CVE-2008-5901iyzi Forum 1.0 beta 3 stores sensitive information under the…
• CVE-2008-5902Buffer overflow in the xrdp_bitmap_invalidate function in xr…
• CVE-2008-5903Array index error in the xrdp_bitmap_def_proc function in xr…
• CVE-2008-5904The rdp_rdp_process_color_pointer_pdu function in rdp/rdp_rd…
• CVE-2008-5905The web interface plugin in KTorrent before 3.1.4 allows rem…
• CVE-2008-5907The png_check_keyword function in pngwutil.c in libpng befor…
• CVE-2008-5908Unspecified vulnerability in the root/boot archive tool in S…
• CVE-2008-5909Unspecified vulnerability in conv_lpd in Sun OpenSolaris has…
• CVE-2008-5910Unspecified vulnerability in txzonemgr in Sun OpenSolaris ha…
• CVE-2008-5911Multiple buffer overflows in RealNetworks Helix Server and H…
• CVE-2008-5912An unspecified function in the JavaScript implementation in …