CVE-2008-4178

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-09-23 · updated 2026-06-16
Weakness: CWE-89

Description

SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and Downline Goldmine Builder allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information.

Affected products

Downline Goldmine Builder: special_category_addon, unknown-unknown
Downline Goldmine New Addon: pro

References

http://packetstorm.linuxsecurity.com/0809-exploits/categoryaddon-sql.txt
http://packetstorm.linuxsecurity.com/0809-exploits/downline-sql.txt
http://packetstormsecurity.org/0809-exploits/newdownline-sql.txt
http://secunia.com/advisories/31812
http://www.securityfocus.com/bid/31169
http://www.vupen.com/english/advisories/2008/2992
http://www.vupen.com/english/advisories/2008/2993
http://www.vupen.com/english/advisories/2008/2994
http://www.vupen.com/english/advisories/2008/2995
https://exchange.xforce.ibmcloud.com/vulnerabilities/45128
https://www.exploit-db.com/exploits/6946
https://www.exploit-db.com/exploits/6947

Get alerted when CVE-2008-4178 or the next vulnerability affects your stack