medium6.8Public exploit code
CVE-2008-6586
Cross-site request forgery (CSRF) vulnerability in gui/index.php in µTorrent (uTorrent) WebUI 0.315 allows remote attackers to (1) hijack the authentication of…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- μTorrent (uTorrent) WebUI 0.310 Beta 2 - Cross-Site Request Forgery2008-04-18 · webapps · php · Verified
Impact
Cross-site request forgery (CSRF) vulnerability in gui/index.php in µTorrent (uTorrent) WebUI 0.315 allows remote attackers to (1) hijack the authentication of users for requests that force the download of arbitrary torrent files via the add-url action and (2) hijack the authentication of administrators for requests that modify the administrator account via the setsetting action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Utorrent | Utorrent Webui | Version 0.315 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/44647
- http://www.securityfocus.com/archive/1/491066/100/0/threaded
- http://www.securityfocus.com/bid/28847
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41926
- http://osvdb.org/44647
- http://www.securityfocus.com/archive/1/491066/100/0/threaded
- http://www.securityfocus.com/bid/28847
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41926