CVE-2008-6586 Cross-site request forgery (CSRF) vulnerability in gui/index.php in µTorrent (uTorrent) WebUI 0.315 allows remote attackers to (1) hijack the authentication of users for requests that force the downlo...
MediumCVSS 6.8
EPSS 2.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site request forgery (CSRF) vulnerability in gui/index.php in µTorrent (uTorrent) WebUI 0.315 allows remote attackers to (1) hijack the authentication of users for requests that force the download of arbitrary torrent files via the add-url action and (2) hijack the authentication of administrators for requests that modify the administrator account via the setsetting action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| utorrent webui | = 0.315 | No fix listed |
References
- 44647 vdb-entry
- 20080418 BitTorrent Clients and CSRF mailing-list
- 28847 exploit vdb-entry
- torrentflux-admin-csrf(41926) vdb-entry