CVE ID:	CVE-2008-5905
Description:	The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5905 BugTraq ID: 31927 http://www.securityfocus.com/bid/31927 http://security.gentoo.org/glsa/glsa-200902-05.xml http://openwall.com/lists/oss-security/2009/01/08/1 http://secunia.com/advisories/32442 http://secunia.com/advisories/32447 http://secunia.com/advisories/33675 http://secunia.com/advisories/34003 http://www.ubuntu.com/usn/USN-711-1 http://www.vupen.com/english/advisories/2008/2911 XForce ISS Database: ktorrent-webinterface-weak-security(46117) https://exchange.xforce.ibmcloud.com/vulnerabilities/46117