CVE-2008-5906: Ktorrent

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

Eval injection vulnerability in the web interface plugin in KTorrent before 3.1.4 allows remote attackers to execute arbitrary PHP code via unspecified parameters to this interface's PHP scripts.

Affected products

• Ktorrent Ktorrent: up to and including 3.1.3; version 0.9 only; version 1.0 only; version 1.1 only; version 1.2 only; version 2.0 only; …

Published 2009-01-15. Last modified 2026-06-16.