CVEvulnerability
CVE-2008-4178
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-09-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and Downline Goldmine Builder allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information.
Affected configurations
• downline goldmine builder
• downline goldmine builder special category addon
• downline goldmine builder unknown
• downline goldmine new addon
• downline goldmine new addon pro
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://packetstorm.linuxsecurity.com/0809-exploits/categoryaddon-sql.txt packetstorm.linuxsecurity.com
- http://packetstorm.linuxsecurity.com/0809-exploits/downline-sql.txt Exploit
- http://packetstormsecurity.org/0809-exploits/newdownline-sql.txt Exploit
- http://secunia.com/advisories/31812 Vendor Advisory
- http://www.securityfocus.com/bid/31169 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/2992 www.vupen.com
- http://www.vupen.com/english/advisories/2008/2993 www.vupen.com
- http://www.vupen.com/english/advisories/2008/2994 www.vupen.com
- http://www.vupen.com/english/advisories/2008/2995 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45128 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6946 www.exploit-db.com
- https://www.exploit-db.com/exploits/6947 www.exploit-db.com
- https://www.exploit-db.com/exploits/6950 www.exploit-db.com
- https://www.exploit-db.com/exploits/6951 www.exploit-db.com
- http://packetstorm.linuxsecurity.com/0809-exploits/categoryaddon-sql.txt packetstorm.linuxsecurity.com
- http://packetstorm.linuxsecurity.com/0809-exploits/downline-sql.txt Exploit
- http://packetstormsecurity.org/0809-exploits/newdownline-sql.txt Exploit
- http://secunia.com/advisories/31812 Vendor Advisory
- http://www.securityfocus.com/bid/31169 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/2992 www.vupen.com
- http://www.vupen.com/english/advisories/2008/2993 www.vupen.com
- http://www.vupen.com/english/advisories/2008/2994 www.vupen.com
- http://www.vupen.com/english/advisories/2008/2995 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45128 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6946 www.exploit-db.com
- https://www.exploit-db.com/exploits/6947 www.exploit-db.com
- https://www.exploit-db.com/exploits/6950 www.exploit-db.com
- https://www.exploit-db.com/exploits/6951 www.exploit-db.com