CVE-2008-4178

SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and Downline Goldmine Builder allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information.

Link	Resource
http://www.securityfocus.com/bid/31169
http://packetstormsecurity.org/0809-exploits/newdownline-sql.txt	Exploit
http://secunia.com/advisories/31812	Vendor Advisory
http://packetstorm.linuxsecurity.com/0809-exploits/categoryaddon-sql.txt
http://packetstorm.linuxsecurity.com/0809-exploits/downline-sql.txt	Exploit
http://www.vupen.com/english/advisories/2008/2993
http://www.vupen.com/english/advisories/2008/2995
http://www.vupen.com/english/advisories/2008/2992
http://www.vupen.com/english/advisories/2008/2994
https://exchange.xforce.ibmcloud.com/vulnerabilities/45128
https://www.exploit-db.com/exploits/6951
https://www.exploit-db.com/exploits/6950
https://www.exploit-db.com/exploits/6947
https://www.exploit-db.com/exploits/6946

Configuration 1

cpe:2.3:a:downline_goldmine:builder:unknown:unknown:pro:*:*:*:*:* cpe:2.3:a:downline_goldmine:builder:special_category_addon:*:*:*:*:*:*:* cpe:2.3:a:downline_goldmine:builder:*:*:*:*:*:*:*:* cpe:2.3:a:downline_goldmine:new_addon:pro:*:*:*:*:*:*:* cpe:2.3:a:downline_goldmine:new_addon:*:*:*:*:*:*:*:*

---

Published : 2008-09-23 03:25

Updated : 2017-09-29 01:32

---

NVD link : CVE-2008-4178

Mitre link : CVE-2008-4178

No products.

CWE-89