Vulnerability Details CVE-2008-6586
Cross-site request forgery (CSRF) vulnerability in gui/index.php in µTorrent (uTorrent) WebUI 0.315 allows remote attackers to (1) hijack the authentication of users for requests that force the download of arbitrary torrent files via the add-url action and (2) hijack the authentication of administrators for requests that modify the administrator account via the setsetting action.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 36.1%
CVSS Severity
CVSS v2 Score 6.8
References
- http://osvdb.org/44647
- http://www.securityfocus.com/archive/1/491066/100/0/threaded
- http://www.securityfocus.com/bid/28847
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41926
- http://osvdb.org/44647
- http://www.securityfocus.com/archive/1/491066/100/0/threaded
- http://www.securityfocus.com/bid/28847
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41926
Products affected by CVE-2008-6586
-
cpe:2.3:a:utorrent:utorrent_webui:0.315