peter bassill · operator
$ cve CVE-2008-4178 JSON

CVE-2008-4178 EXPLOIT

7.5
HIGH · CVSS 2.0 · EPSS 3.4% (pctl 88)

Patch early

A public exploit exists.

Description

SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and Downline Goldmine Builder allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information.

Scoring

CVSS7.5 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS3.38% — more likely to be exploited than 88% of all CVEs
WeaknessCWE-89
On CISA KEVno
Public exploityes
Published2008-09-23
Last modified2026-06-16

Affected (2)

VendorProduct
downline goldminebuilder
downline goldminenew addon

Public exploits

SourceTitleDate
exploit-dbDownline Goldmine paidversion - SQL Injection2008-11-02
exploit-dbDownline Goldmine newdownlinebuilder - SQL Injection2008-11-02
exploit-dbDownline Goldmine Builder - SQL Injection2008-11-01
exploit-dbDownline Goldmine Category Addon - SQL Injection2008-11-01

References

→ the Explorer  ·  watch your stack  ·  NVD